// SPDX-License-Identifier: GPL-2.0-or-later
/* -*- mode: c; c-basic-offset: 8; -*-
 * vim: noexpandtab sw=8 ts=8 sts=0:
 *
 * file.c
 *
 * File open, close, extend, truncate
 *
 * Copyright (C) 2002, 2004 Oracle.  All rights reserved.
 */

#include <linux/capability.h>
#include <linux/fs.h>
#include <linux/types.h>
#include <linux/slab.h>
#include <linux/highmem.h>
#include <linux/pagemap.h>
#include <linux/uio.h>
#include <linux/sched.h>
#include <linux/splice.h>
#include <linux/mount.h>
#include <linux/writeback.h>
#include <linux/falloc.h>
#include <linux/quotaops.h>
#include <linux/blkdev.h>
#include <linux/backing-dev.h>
#include <linux/delay.h>
#include <linux/device-mapper.h>
#include <linux/dm-vims.h>
#include <scsi/scsi.h>
#include <asm/unaligned.h>

#define MLOG_MASK_PREFIX ML_FILE_IO
#include <cluster/masklog.h>
#include "cluster/nodemanager.h"
#include "cluster/heartbeat.h"

#include "ocfs2.h"

#include "alloc.h"
#include "aops.h"
#include "dir.h"
#include "lockglue.h"
#include "extent_map.h"
#include "file.h"
#include "sysfile.h"
#include "inode.h"
#include "ioctl.h"
#include "journal.h"
#include "locks.h"
#include "mmap.h"
#include "suballoc.h"
#include "super.h"
#include "xattr.h"
#include "acl.h"
#include "quota.h"
#include "refcounttree.h"
#include "ocfs2_trace.h"
#include "resize.h"
#include "iso.h"

#include "buffer_head_io.h"
#include "adl/ocfs2_block_dev.h"

static int ocfs2_init_file_private(struct inode *inode, struct file *file)
{
	struct ocfs2_file_private *fp;

	fp = kzalloc(sizeof(struct ocfs2_file_private), GFP_KERNEL);
	if (!fp)
		return -ENOMEM;

	fp->fp_file = file;
	mutex_init(&fp->fp_mutex);
	ocfs2_file_lock_res_init(&fp->fp_flock, fp);
	file->private_data = fp;

	return 0;
}

static void ocfs2_free_file_private(struct inode *inode, struct file *file)
{
	struct ocfs2_file_private *fp = file->private_data;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);

	if (fp) {
		ocfs2_simple_drop_lockres(osb, &fp->fp_flock);
		ocfs2_lock_res_free(osb, &fp->fp_flock);
		kfree(fp);
		file->private_data = NULL;
	}
}

static int ocfs2_file_open(struct inode *inode, struct file *file)
{
	int status;
	int mode = file->f_flags;
	struct ocfs2_inode_info *oi = OCFS2_I(inode);
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);

	trace_ocfs2_file_open(inode, file, file->f_path.dentry,
			      (unsigned long long)oi->ip_blkno,
			      file->f_path.dentry->d_name.len,
			      file->f_path.dentry->d_name.name, mode);

	/* do not allow to open file in case of online recovery */
	if (ocfs2_test_repairing_fs(osb)) {
		status = -EIO;
		mlog_errno(status);
		return status;
	}

	if (file->f_mode & FMODE_WRITE) {
		status = dquot_initialize(inode);
		if (status)
			goto leave;
	}

	spin_lock(&oi->ip_lock);

	/* Check that the inode hasn't been wiped from disk by another
	 * node. If it hasn't then we're safe as long as we hold the
	 * spin lock until our increment of open count. */
	if (oi->ip_flags & OCFS2_INODE_DELETED) {
		spin_unlock(&oi->ip_lock);

		status = -ENOENT;
		return status;
	}

	if (mode & O_DIRECT)
		oi->ip_flags |= OCFS2_INODE_OPEN_DIRECT;

	oi->ip_open_count++;
	spin_unlock(&oi->ip_lock);

	status = ocfs2_init_file_private(inode, file);
	if (status) {
		mlog_errno(status);
		goto leave;
	}

	if (ocfs2_disk_lock(osb)) {
		status = ocfs2_inode_get_share_vol(inode);
		if (status < 0)
			mlog_errno(status);
	}

leave:
	if (status) {
		/*
		 * We want to set open count back if we're failing the
		 * open.
		 */
		spin_lock(&oi->ip_lock);
		oi->ip_open_count--;
		spin_unlock(&oi->ip_lock);
	}

	file->f_mode |= FMODE_NOWAIT;

	return status;
}

static int ocfs2_file_release(struct inode *inode, struct file *file)
{
	struct ocfs2_inode_info *oi = OCFS2_I(inode);

	spin_lock(&oi->ip_lock);
	if (!--oi->ip_open_count)
		oi->ip_flags &= ~OCFS2_INODE_OPEN_DIRECT;

	trace_ocfs2_file_release(inode, file, file->f_path.dentry,
				 oi->ip_blkno,
				 file->f_path.dentry->d_name.len,
				 file->f_path.dentry->d_name.name,
				 oi->ip_open_count);
	spin_unlock(&oi->ip_lock);

	ocfs2_free_file_private(inode, file);

	return 0;
}

static int ocfs2_dir_open(struct inode *inode, struct file *file)
{
	return ocfs2_init_file_private(inode, file);
}

static int ocfs2_dir_release(struct inode *inode, struct file *file)
{
	ocfs2_free_file_private(inode, file);
	return 0;
}

static int ocfs2_sync_file(struct file *file, loff_t start, loff_t end,
			   int datasync)
{
	int err = 0;
	struct inode *inode = file->f_mapping->host;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct ocfs2_inode_info *oi = OCFS2_I(inode);
	journal_t *journal = osb->journal->j_journal;
	int ret;
	tid_t commit_tid;
	bool needs_barrier = false;

	trace_ocfs2_sync_file(inode, file, file->f_path.dentry,
			      oi->ip_blkno,
			      file->f_path.dentry->d_name.len,
			      file->f_path.dentry->d_name.name,
			      (unsigned long long)datasync);
	mlog(ML_DEBUG,
			"%s: sync inode %lu, ip_blkno %llu, file %pd, datasync %d\n",
			osb->uuid_str,
			inode->i_ino, oi->ip_blkno,
			file->f_path.dentry, datasync);

	if (ocfs2_test_invalid_fs(osb)) {
		printk_once(KERN_ERR "%s: %s: OCFS2 invalid.\n",
				__func__, osb->uuid_str);
		return -EIO;
	}

	if (ocfs2_is_hard_readonly(osb) || ocfs2_is_soft_readonly(osb))
		return -EROFS;

	err = file_write_and_wait_range(file, start, end);
	if (err)
		return err;

	commit_tid = datasync ? oi->i_datasync_tid : oi->i_sync_tid;
	if (journal->j_flags & JBD2_BARRIER &&
	    !jbd2_trans_will_send_data_barrier(journal, commit_tid))
		needs_barrier = true;
	err = jbd2_complete_transaction(journal, commit_tid);
	if (needs_barrier) {
		ret = blkdev_issue_flush(inode->i_sb->s_bdev, GFP_KERNEL);
		if (!err)
			err = ret;
	}

	if (err)
		mlog_errno(err);

	return (err < 0) ? -EIO : 0;
}

int ocfs2_should_update_atime(struct inode *inode,
			      struct vfsmount *vfsmnt)
{
	struct timespec64 now;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);

	if (ocfs2_is_hard_readonly(osb) || ocfs2_is_soft_readonly(osb))
		return 0;

	if ((inode->i_flags & S_NOATIME) ||
	    ((inode->i_sb->s_flags & SB_NODIRATIME) && S_ISDIR(inode->i_mode)))
		return 0;

	/*
	 * We can be called with no vfsmnt structure - NFSD will
	 * sometimes do this.
	 *
	 * Note that our action here is different than touch_atime() -
	 * if we can't tell whether this is a noatime mount, then we
	 * don't know whether to trust the value of s_atime_quantum.
	 */
	if (vfsmnt == NULL)
		return 0;

	if ((vfsmnt->mnt_flags & MNT_NOATIME) ||
	    ((vfsmnt->mnt_flags & MNT_NODIRATIME) && S_ISDIR(inode->i_mode)))
		return 0;

	if (vfsmnt->mnt_flags & MNT_RELATIME) {
		if ((timespec64_compare(&inode->i_atime, &inode->i_mtime) <= 0) ||
		    (timespec64_compare(&inode->i_atime, &inode->i_ctime) <= 0))
			return 1;

		return 0;
	}

	now = current_time(inode);
	if ((now.tv_sec - inode->i_atime.tv_sec <= osb->s_atime_quantum))
		return 0;
	else
		return 1;
}

int ocfs2_update_inode_atime(struct inode *inode,
			     struct buffer_head *bh)
{
	int ret;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	handle_t *handle;
	struct ocfs2_dinode *di = (struct ocfs2_dinode *) bh->b_data;

	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		mlog_errno(ret);
		goto out;
	}

	ret = ocfs2_journal_access_di(handle, INODE_CACHE(inode), bh,
				      OCFS2_JOURNAL_ACCESS_WRITE);
	if (ret) {
		mlog_errno(ret);
		goto out_commit;
	}

	/*
	 * Don't use ocfs2_mark_inode_dirty() here as we don't always
	 * have i_mutex to guard against concurrent changes to other
	 * inode fields.
	 */
	inode->i_atime = current_time(inode);
	di->i_atime = cpu_to_le64(inode->i_atime.tv_sec);
	di->i_atime_nsec = cpu_to_le32(inode->i_atime.tv_nsec);
	ocfs2_update_inode_fsync_trans(handle, inode, 0);
	ocfs2_journal_dirty(handle, bh);

out_commit:
	ocfs2_commit_trans(osb, handle);
out:
	return ret;
}

/*
 * Will look for holes and unwritten extents in the range starting at
 * pos for count bytes (inclusive).
 */
static int ocfs2_check_range_for_holes(struct inode *inode, loff_t pos,
				       size_t count)
{
	int ret = 0;
	unsigned int extent_flags;
	u32 cpos, clusters, extent_len, phys_cpos;
	struct super_block *sb = inode->i_sb;

	cpos = pos >> OCFS2_SB(sb)->s_clustersize_bits;
	clusters = ocfs2_clusters_for_bytes(sb, pos + count) - cpos;

	while (clusters) {
		ret = ocfs2_get_clusters(inode, cpos, &phys_cpos, &extent_len,
					 &extent_flags);
		if (ret < 0) {
			mlog_errno(ret);
			goto out;
		}

		if (phys_cpos == 0 || (extent_flags & OCFS2_EXT_UNWRITTEN)) {
			ret = 1;
			break;
		}

		if (extent_len > clusters)
			extent_len = clusters;

		clusters -= extent_len;
		cpos += extent_len;
	}
out:
	return ret;
}

int ocfs2_set_inode_size(handle_t *handle,
				struct inode *inode,
				struct buffer_head *fe_bh,
				u64 new_i_size)
{
	int status;

	i_size_write(inode, new_i_size);
	inode->i_blocks = ocfs2_inode_sector_count(inode);
	inode->i_ctime = inode->i_mtime = current_time(inode);

	status = ocfs2_mark_inode_dirty(handle, inode, fe_bh);
	if (status < 0) {
		mlog_errno(status);
		goto bail;
	}

bail:
	return status;
}

int ocfs2_simple_size_update(struct inode *inode,
			     struct buffer_head *di_bh,
			     u64 new_i_size)
{
	int ret;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	handle_t *handle = NULL;

	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		mlog_errno(ret);
		goto out;
	}

	ret = ocfs2_set_inode_size(handle, inode, di_bh,
				   new_i_size);
	if (ret < 0)
		mlog_errno(ret);

	ocfs2_update_inode_fsync_trans(handle, inode, 0);
	ocfs2_commit_trans(osb, handle);
out:
	return ret;
}

static int ocfs2_cow_file_pos(struct inode *inode,
			      struct buffer_head *fe_bh,
			      u64 offset)
{
	int status;
	u32 phys, cpos = offset >> OCFS2_SB(inode->i_sb)->s_clustersize_bits;
	unsigned int num_clusters = 0;
	unsigned int ext_flags = 0;

	/*
	 * If the new offset is aligned to the range of the cluster, there is
	 * no space for ocfs2_zero_range_for_truncate to fill, so no need to
	 * CoW either.
	 */
	if ((offset & (OCFS2_SB(inode->i_sb)->s_clustersize - 1)) == 0)
		return 0;

	status = ocfs2_get_clusters(inode, cpos, &phys,
				    &num_clusters, &ext_flags);
	if (status) {
		mlog_errno(status);
		goto out;
	}

	if (!(ext_flags & OCFS2_EXT_REFCOUNTED))
		goto out;

	return ocfs2_refcount_cow(inode, fe_bh, cpos, 1, cpos+1);

out:
	return status;
}

static int ocfs2_orphan_for_truncate(struct ocfs2_super *osb,
				     struct inode *inode,
				     struct buffer_head *fe_bh,
				     u64 new_i_size)
{
	int status;
	handle_t *handle;
	struct ocfs2_dinode *di;
	u64 cluster_bytes;

	/*
	 * We need to CoW the cluster contains the offset if it is reflinked
	 * since we will call ocfs2_zero_range_for_truncate later which will
	 * write "0" from offset to the end of the cluster.
	 */
	status = ocfs2_cow_file_pos(inode, fe_bh, new_i_size);
	if (status) {
		mlog_errno(status);
		return status;
	}

	/* TODO: This needs to actually orphan the inode in this
	 * transaction. */

	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		status = PTR_ERR(handle);
		mlog_errno(status);
		goto out;
	}

	status = ocfs2_journal_access_di(handle, INODE_CACHE(inode), fe_bh,
					 OCFS2_JOURNAL_ACCESS_WRITE);
	if (status < 0) {
		mlog_errno(status);
		goto out_commit;
	}

	/*
	 * Do this before setting i_size.
	 */
	cluster_bytes = ocfs2_align_bytes_to_clusters(inode->i_sb, new_i_size);
	status = ocfs2_zero_range_for_truncate(inode, handle, new_i_size,
					       cluster_bytes);
	if (status) {
		mlog_errno(status);
		goto out_commit;
	}

	i_size_write(inode, new_i_size);
	inode->i_ctime = inode->i_mtime = current_time(inode);

	di = (struct ocfs2_dinode *) fe_bh->b_data;
	di->i_size = cpu_to_le64(new_i_size);
	di->i_ctime = di->i_mtime = cpu_to_le64(inode->i_ctime.tv_sec);
	di->i_ctime_nsec = di->i_mtime_nsec = cpu_to_le32(inode->i_ctime.tv_nsec);
	ocfs2_update_inode_fsync_trans(handle, inode, 0);

	ocfs2_journal_dirty(handle, fe_bh);

out_commit:
	ocfs2_commit_trans(osb, handle);
out:
	return status;
}

int ocfs2_truncate_file(struct inode *inode,
			       struct buffer_head *di_bh,
			       u64 new_i_size)
{
	int status = 0;
	struct ocfs2_dinode *fe = NULL;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);

	/* We trust di_bh because it comes from ocfs2_inode_lock(), which
	 * already validated it */
	fe = (struct ocfs2_dinode *) di_bh->b_data;

	trace_ocfs2_truncate_file((unsigned long long)OCFS2_I(inode)->ip_blkno,
				  (unsigned long long)le64_to_cpu(fe->i_size),
				  (unsigned long long)new_i_size);

	mlog(0, "%s: inode %llu, i_size %llu, new_i_size %llu.\n",
			osb->uuid_str, (unsigned long long)OCFS2_I(inode)->ip_blkno,
			(unsigned long long)le64_to_cpu(fe->i_size),
			(unsigned long long)new_i_size);

	/*
	 * disable BUG_ON if size in inode and fe is
	 * inconsistent, return error instead
	 */
	if (le64_to_cpu(fe->i_size) != i_size_read(inode)) {
		mlog(ML_ERROR,
				"Inode %llu, inode i_size = %lld != di i_size = %llu, i_flags = 0x%x\n",
				(unsigned long long)OCFS2_I(inode)->ip_blkno,
				i_size_read(inode),
				(unsigned long long)le64_to_cpu(fe->i_size),
				le32_to_cpu(fe->i_flags));
		status = -EINVAL;
		goto bail;
	}

	if (new_i_size > le64_to_cpu(fe->i_size)) {
		trace_ocfs2_truncate_file_error(
			(unsigned long long)le64_to_cpu(fe->i_size),
			(unsigned long long)new_i_size);
		status = -EINVAL;
		mlog_errno(status);
		goto bail;
	}

	down_write(&OCFS2_I(inode)->ip_alloc_sem);

	ocfs2_resv_discard(&osb->osb_la_resmap,
			   &OCFS2_I(inode)->ip_la_data_resv);

	/*
	 * The inode lock forced other nodes to sync and drop their
	 * pages, which (correctly) happens even if we have a truncate
	 * without allocation change - ocfs2 cluster sizes can be much
	 * greater than page size, so we have to truncate them
	 * anyway.
	 */

	if (OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
		unmap_mapping_range(inode->i_mapping,
				    new_i_size + PAGE_SIZE - 1, 0, 1);
		truncate_inode_pages(inode->i_mapping, new_i_size);
		status = ocfs2_truncate_inline(inode, di_bh, new_i_size,
					       i_size_read(inode), 1);
		if (status)
			mlog_errno(status);

		goto bail_unlock_sem;
	}

	/* alright, we're going to need to do a full blown alloc size
	 * change. Orphan the inode so that recovery can complete the
	 * truncate if necessary. This does the task of marking
	 * i_size. */
	status = ocfs2_orphan_for_truncate(osb, inode, di_bh, new_i_size);
	if (status < 0) {
		mlog_errno(status);
		goto bail_unlock_sem;
	}

	unmap_mapping_range(inode->i_mapping, new_i_size + PAGE_SIZE - 1, 0, 1);
	truncate_inode_pages(inode->i_mapping, new_i_size);

	status = ocfs2_commit_truncate(osb, inode, di_bh, 0);
	if (status < 0) {
		mlog_errno(status);
		goto bail_unlock_sem;
	}

	/* TODO: orphan dir cleanup here. */
bail_unlock_sem:
	up_write(&OCFS2_I(inode)->ip_alloc_sem);

bail:
	if (!status && OCFS2_I(inode)->ip_clusters == 0)
		status = ocfs2_try_remove_refcount_tree(inode, di_bh);

	return status;
}

/*
 * extend file allocation only here.
 * we'll update all the disk stuff, and oip->alloc_size
 *
 * expect stuff to be locked, a transaction started and enough data /
 * metadata reservations in the contexts.
 *
 * Will return -EAGAIN, and a reason if a restart is needed.
 * If passed in, *reason will always be set, even in error.
 */
int ocfs2_add_inode_data(struct ocfs2_super *osb,
			 struct inode *inode,
			 u32 *logical_offset,
			 u32 clusters_to_add,
			 int mark_unwritten,
			 struct buffer_head *fe_bh,
			 handle_t *handle,
			 struct ocfs2_alloc_context *data_ac,
			 struct ocfs2_alloc_context *meta_ac,
			 enum ocfs2_alloc_restarted *reason_ret)
{
	int ret;
	struct ocfs2_extent_tree et;

	ocfs2_init_dinode_extent_tree(&et, INODE_CACHE(inode), fe_bh);
	ret = ocfs2_add_clusters_in_btree(inode, handle, &et, logical_offset,
					  clusters_to_add, mark_unwritten,
					  data_ac, meta_ac, reason_ret);

	return ret;
}

static int ocfs2_extend_allocation(struct inode *inode, u32 logical_start,
				   u32 clusters_to_add, int mark_unwritten)
{
	int status = 0;
	int restart_func = 0;
	int credits;
	u32 prev_clusters;
	struct buffer_head *bh = NULL;
	struct ocfs2_dinode *fe = NULL;
	handle_t *handle = NULL;
	struct ocfs2_alloc_context *data_ac = NULL;
	struct ocfs2_alloc_context *meta_ac = NULL;
	enum ocfs2_alloc_restarted why = RESTART_NONE;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct ocfs2_extent_tree et;
	int did_quota = 0;

	/*
	 * Unwritten extent only exists for file systems which
	 * support holes.
	 */
	BUG_ON(mark_unwritten && !ocfs2_sparse_alloc(osb));

	status = ocfs2_read_inode_block(inode, &bh);
	if (status < 0) {
		mlog_errno(status);
		goto leave;
	}
	fe = (struct ocfs2_dinode *) bh->b_data;

restart_all:
	if (le32_to_cpu(fe->i_clusters) != OCFS2_I(inode)->ip_clusters) {
		ocfs2_error(inode->i_sb,
				"Disk clusters %u is not equal memory clusters %u",
				le32_to_cpu(fe->i_clusters),
				OCFS2_I(inode)->ip_clusters);
		status = -EROFS;
		goto leave;
	}

	ocfs2_init_dinode_extent_tree(&et, INODE_CACHE(inode), bh);
	status = ocfs2_lock_allocators(inode, &et, clusters_to_add, 0,
				       &data_ac, &meta_ac);
	if (status) {
		mlog_errno(status);
		goto leave;
	}

	credits = ocfs2_calc_extend_credits(osb->sb, &fe->id2.i_list);
	handle = ocfs2_start_trans(osb, credits);
	if (IS_ERR(handle)) {
		status = PTR_ERR(handle);
		handle = NULL;
		mlog_errno(status);
		goto leave;
	}

restarted_transaction:
	trace_ocfs2_extend_allocation(
		(unsigned long long)OCFS2_I(inode)->ip_blkno,
		(unsigned long long)i_size_read(inode),
		le32_to_cpu(fe->i_clusters), clusters_to_add,
		why, restart_func);

	status = dquot_alloc_space_nodirty(inode,
			ocfs2_clusters_to_bytes(osb->sb, clusters_to_add));
	if (status)
		goto leave;
	did_quota = 1;

	/* reserve a write to the file entry early on - that we if we
	 * run out of credits in the allocation path, we can still
	 * update i_size. */
	status = ocfs2_journal_access_di(handle, INODE_CACHE(inode), bh,
					 OCFS2_JOURNAL_ACCESS_WRITE);
	if (status < 0) {
		mlog_errno(status);
		goto leave;
	}

	prev_clusters = OCFS2_I(inode)->ip_clusters;

	status = ocfs2_add_inode_data(osb,
				      inode,
				      &logical_start,
				      clusters_to_add,
				      mark_unwritten,
				      bh,
				      handle,
				      data_ac,
				      meta_ac,
				      &why);
	if ((status < 0) && (status != -EAGAIN)) {
		if (status != -ENOSPC)
			mlog_errno(status);
		goto leave;
	}
	ocfs2_update_inode_fsync_trans(handle, inode, 1);
	ocfs2_journal_dirty(handle, bh);

	spin_lock(&OCFS2_I(inode)->ip_lock);
	clusters_to_add -= (OCFS2_I(inode)->ip_clusters - prev_clusters);
	spin_unlock(&OCFS2_I(inode)->ip_lock);
	/* Release unused quota reservation */
	dquot_free_space(inode,
			ocfs2_clusters_to_bytes(osb->sb, clusters_to_add));
	did_quota = 0;

	if (why != RESTART_NONE && clusters_to_add) {
		if (why == RESTART_META) {
			restart_func = 1;
			status = 0;
		} else {
			/*
			 * If IO has already returned, we need to
			 * reschedule the hung check work avoid to invalid.
			 */
			if (data_ac && data_ac->ac_which != OCFS2_AC_USE_LOCAL)
				ocfs2_reschedule_hung_check_work(osb, data_ac->ac_inode);

			BUG_ON(why != RESTART_TRANS);

			status = ocfs2_allocate_extend_trans(handle, 1);
			if (status < 0) {
				/* handle still has to be committed at
				 * this point. */
				status = -ENOMEM;
				mlog_errno(status);
				goto leave;
			}
			goto restarted_transaction;
		}
	}

	trace_ocfs2_extend_allocation_end(OCFS2_I(inode)->ip_blkno,
	     le32_to_cpu(fe->i_clusters),
	     (unsigned long long)le64_to_cpu(fe->i_size),
	     OCFS2_I(inode)->ip_clusters,
	     (unsigned long long)i_size_read(inode));

leave:
	if (status < 0 && did_quota)
		dquot_free_space(inode,
			ocfs2_clusters_to_bytes(osb->sb, clusters_to_add));
	if (handle) {
		ocfs2_commit_trans(osb, handle);
		handle = NULL;
	}
	if (data_ac) {
		ocfs2_free_alloc_context(data_ac);
		data_ac = NULL;
	}
	if (meta_ac) {
		ocfs2_free_alloc_context(meta_ac);
		meta_ac = NULL;
	}
	if ((!status) && restart_func) {
		restart_func = 0;
		goto restart_all;
	}
	brelse(bh);
	bh = NULL;

	return status;
}

/*
 * While a write will already be ordering the data, a truncate will not.
 * Thus, we need to explicitly order the zeroed pages.
 */
static handle_t *ocfs2_zero_start_ordered_transaction(struct inode *inode,
						      struct buffer_head *di_bh,
						      loff_t start_byte,
						      loff_t length)
{
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	handle_t *handle = NULL;
	int ret = 0;

	if (!ocfs2_should_order_data(inode))
		goto out;

	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		ret = -ENOMEM;
		mlog_errno(ret);
		goto out;
	}

	ret = ocfs2_jbd2_inode_add_write(handle, inode, start_byte, length);
	if (ret < 0) {
		mlog_errno(ret);
		goto out;
	}

	ret = ocfs2_journal_access_di(handle, INODE_CACHE(inode), di_bh,
				      OCFS2_JOURNAL_ACCESS_WRITE);
	if (ret)
		mlog_errno(ret);
	ocfs2_update_inode_fsync_trans(handle, inode, 1);

out:
	if (ret) {
		if (!IS_ERR(handle))
			ocfs2_commit_trans(osb, handle);
		handle = ERR_PTR(ret);
	}
	return handle;
}

/* Some parts of this taken from generic_cont_expand, which turned out
 * to be too fragile to do exactly what we need without us having to
 * worry about recursive locking in ->write_begin() and ->write_end(). */
static int ocfs2_write_zero_page(struct inode *inode, u64 abs_from,
				 u64 abs_to, struct buffer_head *di_bh)
{
	struct address_space *mapping = inode->i_mapping;
	struct page *page;
	unsigned long index = abs_from >> PAGE_SHIFT;
	handle_t *handle;
	int ret = 0;
	unsigned zero_from, zero_to, block_start, block_end;
	struct ocfs2_dinode *di = (struct ocfs2_dinode *)di_bh->b_data;

	BUG_ON(abs_from >= abs_to);
	BUG_ON(abs_to > (((u64)index + 1) << PAGE_SHIFT));
	BUG_ON(abs_from & (inode->i_blkbits - 1));

	handle = ocfs2_zero_start_ordered_transaction(inode, di_bh,
						      abs_from,
						      abs_to - abs_from);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		goto out;
	}

	page = find_or_create_page(mapping, index, GFP_NOFS);
	if (!page) {
		ret = -ENOMEM;
		mlog_errno(ret);
		goto out_commit_trans;
	}

	/* Get the offsets within the page that we want to zero */
	zero_from = abs_from & (PAGE_SIZE - 1);
	zero_to = abs_to & (PAGE_SIZE - 1);
	if (!zero_to)
		zero_to = PAGE_SIZE;

	trace_ocfs2_write_zero_page(
			(unsigned long long)OCFS2_I(inode)->ip_blkno,
			(unsigned long long)abs_from,
			(unsigned long long)abs_to,
			index, zero_from, zero_to);

	/* We know that zero_from is block aligned */
	for (block_start = zero_from; block_start < zero_to;
	     block_start = block_end) {
		block_end = block_start + i_blocksize(inode);

		/*
		 * block_start is block-aligned.  Bump it by one to force
		 * __block_write_begin and block_commit_write to zero the
		 * whole block.
		 */
		ret = __block_write_begin(page, block_start + 1, 0,
					  ocfs2_get_block);
		if (ret < 0) {
			mlog_errno(ret);
			goto out_unlock;
		}

		/* must not update i_size! */
		ret = block_commit_write(page, block_start + 1,
					 block_start + 1);
		if (ret < 0)
			mlog_errno(ret);
		else
			ret = 0;
	}

	/*
	 * fs-writeback will release the dirty pages without page lock
	 * whose offset are over inode size, the release happens at
	 * block_write_full_page().
	 */
	i_size_write(inode, abs_to);
	inode->i_blocks = ocfs2_inode_sector_count(inode);
	di->i_size = cpu_to_le64((u64)i_size_read(inode));
	inode->i_mtime = inode->i_ctime = current_time(inode);
	di->i_mtime = di->i_ctime = cpu_to_le64(inode->i_mtime.tv_sec);
	di->i_ctime_nsec = cpu_to_le32(inode->i_mtime.tv_nsec);
	di->i_mtime_nsec = di->i_ctime_nsec;
	if (handle) {
		ocfs2_journal_dirty(handle, di_bh);
		ocfs2_update_inode_fsync_trans(handle, inode, 1);
	}

out_unlock:
	unlock_page(page);
	put_page(page);
out_commit_trans:
	if (handle)
		ocfs2_commit_trans(OCFS2_SB(inode->i_sb), handle);
out:
	return ret;
}

/*
 * Find the next range to zero.  We do this in terms of bytes because
 * that's what ocfs2_zero_extend() wants, and it is dealing with the
 * pagecache.  We may return multiple extents.
 *
 * zero_start and zero_end are ocfs2_zero_extend()s current idea of what
 * needs to be zeroed.  range_start and range_end return the next zeroing
 * range.  A subsequent call should pass the previous range_end as its
 * zero_start.  If range_end is 0, there's nothing to do.
 *
 * Unwritten extents are skipped over.  Refcounted extents are CoWd.
 */
static int ocfs2_zero_extend_get_range(struct inode *inode,
				       struct buffer_head *di_bh,
				       u64 zero_start, u64 zero_end,
				       u64 *range_start, u64 *range_end)
{
	int rc = 0, needs_cow = 0;
	u32 p_cpos, zero_clusters = 0;
	u32 zero_cpos =
		zero_start >> OCFS2_SB(inode->i_sb)->s_clustersize_bits;
	u32 last_cpos = ocfs2_clusters_for_bytes(inode->i_sb, zero_end);
	unsigned int num_clusters = 0;
	unsigned int ext_flags = 0;

	while (zero_cpos < last_cpos) {
		rc = ocfs2_get_clusters(inode, zero_cpos, &p_cpos,
					&num_clusters, &ext_flags);
		if (rc) {
			mlog_errno(rc);
			goto out;
		}

		if (p_cpos && !(ext_flags & OCFS2_EXT_UNWRITTEN)) {
			zero_clusters = num_clusters;
			if (ext_flags & OCFS2_EXT_REFCOUNTED)
				needs_cow = 1;
			break;
		}

		zero_cpos += num_clusters;
	}
	if (!zero_clusters) {
		*range_end = 0;
		goto out;
	}

	while ((zero_cpos + zero_clusters) < last_cpos) {
		rc = ocfs2_get_clusters(inode, zero_cpos + zero_clusters,
					&p_cpos, &num_clusters,
					&ext_flags);
		if (rc) {
			mlog_errno(rc);
			goto out;
		}

		if (!p_cpos || (ext_flags & OCFS2_EXT_UNWRITTEN))
			break;
		if (ext_flags & OCFS2_EXT_REFCOUNTED)
			needs_cow = 1;
		zero_clusters += num_clusters;
	}
	if ((zero_cpos + zero_clusters) > last_cpos)
		zero_clusters = last_cpos - zero_cpos;

	if (needs_cow) {
		rc = ocfs2_refcount_cow(inode, di_bh, zero_cpos,
					zero_clusters, UINT_MAX);
		if (rc) {
			mlog_errno(rc);
			goto out;
		}
	}

	*range_start = ocfs2_clusters_to_bytes(inode->i_sb, zero_cpos);
	*range_end = ocfs2_clusters_to_bytes(inode->i_sb,
					     zero_cpos + zero_clusters);

out:
	return rc;
}

/*
 * Zero one range returned from ocfs2_zero_extend_get_range().  The caller
 * has made sure that the entire range needs zeroing.
 */
static int ocfs2_zero_extend_range(struct inode *inode, u64 range_start,
				   u64 range_end, struct buffer_head *di_bh)
{
	int rc = 0;
	u64 next_pos;
	u64 zero_pos = range_start;

	trace_ocfs2_zero_extend_range(
			(unsigned long long)OCFS2_I(inode)->ip_blkno,
			(unsigned long long)range_start,
			(unsigned long long)range_end);
	BUG_ON(range_start >= range_end);

	while (zero_pos < range_end) {
		next_pos = (zero_pos & PAGE_MASK) + PAGE_SIZE;
		if (next_pos > range_end)
			next_pos = range_end;
		rc = ocfs2_write_zero_page(inode, zero_pos, next_pos, di_bh);
		if (rc < 0) {
			mlog_errno(rc);
			break;
		}
		zero_pos = next_pos;

		/*
		 * Very large extends have the potential to lock up
		 * the cpu for extended periods of time.
		 */
		cond_resched();
	}

	return rc;
}

int ocfs2_zero_extend(struct inode *inode, struct buffer_head *di_bh,
		      loff_t zero_to_size)
{
	int ret = 0;
	u64 zero_start, range_start = 0, range_end = 0;
	struct super_block *sb = inode->i_sb;

	zero_start = ocfs2_align_bytes_to_blocks(sb, i_size_read(inode));
	trace_ocfs2_zero_extend((unsigned long long)OCFS2_I(inode)->ip_blkno,
				(unsigned long long)zero_start,
				(unsigned long long)i_size_read(inode));
	while (zero_start < zero_to_size) {
		ret = ocfs2_zero_extend_get_range(inode, di_bh, zero_start,
						  zero_to_size,
						  &range_start,
						  &range_end);
		if (ret) {
			mlog_errno(ret);
			break;
		}
		if (!range_end)
			break;
		/* Trim the ends */
		if (range_start < zero_start)
			range_start = zero_start;
		if (range_end > zero_to_size)
			range_end = zero_to_size;

		ret = ocfs2_zero_extend_range(inode, range_start,
					      range_end, di_bh);
		if (ret) {
			mlog_errno(ret);
			break;
		}
		zero_start = range_end;
	}

	return ret;
}

int ocfs2_extend_no_holes(struct inode *inode, struct buffer_head *di_bh,
			  u64 new_i_size, u64 zero_to)
{
	int ret;
	u32 clusters_to_add;
	struct ocfs2_inode_info *oi = OCFS2_I(inode);

	/*
	 * Only quota files call this without a bh, and they can't be
	 * refcounted.
	 */
	BUG_ON(!di_bh && ocfs2_is_refcount_inode(inode));
	BUG_ON(!di_bh && !(oi->ip_flags & OCFS2_INODE_SYSTEM_FILE));

	clusters_to_add = ocfs2_clusters_for_bytes(inode->i_sb, new_i_size);
	if (clusters_to_add < oi->ip_clusters)
		clusters_to_add = 0;
	else
		clusters_to_add -= oi->ip_clusters;

	if (clusters_to_add) {
		ret = ocfs2_extend_allocation(inode, oi->ip_clusters,
					      clusters_to_add, 0);
		if (ret) {
			mlog_errno(ret);
			goto out;
		}
	}

	/*
	 * Call this even if we don't add any clusters to the tree. We
	 * still need to zero the area between the old i_size and the
	 * new i_size.
	 */
	ret = ocfs2_zero_extend(inode, di_bh, zero_to);
	if (ret < 0)
		mlog_errno(ret);

out:
	return ret;
}

static int ocfs2_extend_file(struct inode *inode,
			     struct buffer_head *di_bh,
			     u64 new_i_size)
{
	int ret = 0;
	struct ocfs2_inode_info *oi = OCFS2_I(inode);

	BUG_ON(!di_bh);

	/* setattr sometimes calls us like this. */
	if (new_i_size == 0)
		goto out;

	if (i_size_read(inode) == new_i_size)
		goto out;
	BUG_ON(new_i_size < i_size_read(inode));

	/*
	 * The alloc sem blocks people in read/write from reading our
	 * allocation until we're done changing it. We depend on
	 * i_mutex to block other extend/truncate calls while we're
	 * here.  We even have to hold it for sparse files because there
	 * might be some tail zeroing.
	 */
	down_write(&oi->ip_alloc_sem);

	if (oi->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
		/*
		 * We can optimize small extends by keeping the inodes
		 * inline data.
		 */
		if (ocfs2_size_fits_inline_data(di_bh, new_i_size)) {
			up_write(&oi->ip_alloc_sem);
			goto out_update_size;
		}

		ret = ocfs2_convert_inline_data_to_extents(inode, di_bh);
		if (ret) {
			up_write(&oi->ip_alloc_sem);
			mlog_errno(ret);
			goto out;
		}
	}

	if (ocfs2_sparse_alloc(OCFS2_SB(inode->i_sb)))
		ret = ocfs2_zero_extend(inode, di_bh, new_i_size);
	else
		ret = ocfs2_extend_no_holes(inode, di_bh, new_i_size,
					    new_i_size);

	up_write(&oi->ip_alloc_sem);

	if (ret < 0) {
		mlog_errno(ret);
		goto out;
	}

out_update_size:
	ret = ocfs2_simple_size_update(inode, di_bh, new_i_size);
	if (ret < 0)
		mlog_errno(ret);

out:
	return ret;
}

int ocfs2_setattr(struct dentry *dentry, struct iattr *attr)
{
	int status = 0, size_change;
	int inode_locked = 0;
	struct inode *inode = d_inode(dentry);
	struct super_block *sb = inode->i_sb;
	struct ocfs2_super *osb = OCFS2_SB(sb);
	struct buffer_head *bh = NULL;
	handle_t *handle = NULL;
	struct dquot *transfer_to[MAXQUOTAS] = { };
	int qtype;
	int had_lock;
	struct ocfs2_lock_holder *oh;

	trace_ocfs2_setattr(inode, dentry,
			    (unsigned long long)OCFS2_I(inode)->ip_blkno,
			    dentry->d_name.len, dentry->d_name.name,
			    attr->ia_valid, attr->ia_mode,
			    from_kuid(&init_user_ns, attr->ia_uid),
			    from_kgid(&init_user_ns, attr->ia_gid));

	if (ocfs2_test_invalid_fs(osb)) {
		mlog(ML_ERROR,
				"%s: OCFS2 invalid because of disk timeout.\n",
				osb->uuid_str);
		return -EIO;
	}

	/* ensuring we don't even attempt to truncate a symlink */
	if (S_ISLNK(inode->i_mode))
		attr->ia_valid &= ~ATTR_SIZE;

#define OCFS2_VALID_ATTRS (ATTR_ATIME | ATTR_MTIME | ATTR_CTIME | ATTR_SIZE \
			   | ATTR_GID | ATTR_UID | ATTR_MODE)
	if (!(attr->ia_valid & OCFS2_VALID_ATTRS))
		return 0;

	status = setattr_prepare(dentry, attr);
	if (status)
		return status;

	if (is_quota_modification(inode, attr)) {
		status = dquot_initialize(inode);
		if (status)
			return status;
	}
	size_change = S_ISREG(inode->i_mode) && attr->ia_valid & ATTR_SIZE;
	if (size_change) {
		/*
		 * Here we should wait dio to finish before inode lock
		 * to avoid a deadlock between ocfs2_setattr() and
		 * ocfs2_dio_end_io_write()
		 */
		inode_dio_wait(inode);

		status = ocfs2_rw_lock(inode, 1);
		if (status < 0) {
			mlog_errno(status);
			goto bail;
		}
	}

	had_lock = ocfs2_inode_lock_tracker(inode, &bh, 1, &oh);
	if (had_lock < 0) {
		status = had_lock;
		goto bail_unlock_rw;
	} else if (had_lock) {
		/*
		 * As far as we know, ocfs2_setattr() could only be the first
		 * VFS entry point in the call chain of recursive cluster
		 * locking issue.
		 *
		 * For instance:
		 * chmod_common()
		 *  notify_change()
		 *   ocfs2_setattr()
		 *    posix_acl_chmod()
		 *     ocfs2_iop_get_acl()
		 *
		 * But, we're not 100% sure if it's always true, because the
		 * ordering of the VFS entry points in the call chain is out
		 * of our control. So, we'd better dump the stack here to
		 * catch the other cases of recursive locking.
		 */
		mlog(ML_ERROR, "Another case of recursive locking:\n");
		dump_stack();
	}

	inode_locked = 1;

	if (size_change) {
		status = inode_newsize_ok(inode, attr->ia_size);
		if (status)
			goto bail_unlock;

		if (i_size_read(inode) >= attr->ia_size) {
			if (ocfs2_should_order_data(inode)) {
				status = ocfs2_begin_ordered_truncate(inode,
								      attr->ia_size);
				if (status)
					goto bail_unlock;
			}
			status = ocfs2_truncate_file(inode, bh, attr->ia_size);
		} else
			status = ocfs2_extend_file(inode, bh, attr->ia_size);
		if (status < 0) {
			if (status != -ENOSPC)
				mlog_errno(status);
			status = -ENOSPC;
			goto bail_unlock;
		}
	}

	if ((attr->ia_valid & ATTR_UID && !uid_eq(attr->ia_uid, inode->i_uid)) ||
	    (attr->ia_valid & ATTR_GID && !gid_eq(attr->ia_gid, inode->i_gid))) {
		/*
		 * Gather pointers to quota structures so that allocation /
		 * freeing of quota structures happens here and not inside
		 * dquot_transfer() where we have problems with lock ordering
		 */
		if (attr->ia_valid & ATTR_UID && !uid_eq(attr->ia_uid, inode->i_uid)
		    && OCFS2_HAS_RO_COMPAT_FEATURE(sb,
		    OCFS2_FEATURE_RO_COMPAT_USRQUOTA)) {
			transfer_to[USRQUOTA] = dqget(sb, make_kqid_uid(attr->ia_uid));
			if (IS_ERR(transfer_to[USRQUOTA])) {
				status = PTR_ERR(transfer_to[USRQUOTA]);
				transfer_to[USRQUOTA] = NULL;
				goto bail_unlock;
			}
		}
		if (attr->ia_valid & ATTR_GID && !gid_eq(attr->ia_gid, inode->i_gid)
		    && OCFS2_HAS_RO_COMPAT_FEATURE(sb,
		    OCFS2_FEATURE_RO_COMPAT_GRPQUOTA)) {
			transfer_to[GRPQUOTA] = dqget(sb, make_kqid_gid(attr->ia_gid));
			if (IS_ERR(transfer_to[GRPQUOTA])) {
				status = PTR_ERR(transfer_to[GRPQUOTA]);
				transfer_to[GRPQUOTA] = NULL;
				goto bail_unlock;
			}
		}
		down_write(&OCFS2_I(inode)->ip_alloc_sem);
		handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS +
					   2 * ocfs2_quota_trans_credits(sb));
		if (IS_ERR(handle)) {
			status = PTR_ERR(handle);
			mlog_errno(status);
			goto bail_unlock_alloc;
		}
		status = __dquot_transfer(inode, transfer_to);
		if (status < 0)
			goto bail_commit;
	} else {
		down_write(&OCFS2_I(inode)->ip_alloc_sem);
		handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
		if (IS_ERR(handle)) {
			status = PTR_ERR(handle);
			mlog_errno(status);
			goto bail_unlock_alloc;
		}
	}

	setattr_copy(inode, attr);
	mark_inode_dirty(inode);

	status = ocfs2_mark_inode_dirty(handle, inode, bh);
	if (status < 0)
		mlog_errno(status);

bail_commit:
	ocfs2_commit_trans(osb, handle);
bail_unlock_alloc:
	up_write(&OCFS2_I(inode)->ip_alloc_sem);
bail_unlock:
	if (status && inode_locked) {
		ocfs2_inode_unlock_tracker(inode, 1, &oh, had_lock);
		inode_locked = 0;
	}
bail_unlock_rw:
	if (size_change)
		ocfs2_rw_unlock(inode, 1);
bail:

	/* Release quota pointers in case we acquired them */
	for (qtype = 0; qtype < OCFS2_MAXQUOTAS; qtype++)
		dqput(transfer_to[qtype]);

	if (!status && attr->ia_valid & ATTR_MODE) {
		status = ocfs2_acl_chmod(inode, bh);
		if (status < 0)
			mlog_errno(status);
	}
	if (inode_locked)
		ocfs2_inode_unlock_tracker(inode, 1, &oh, had_lock);

	if (bh && !had_lock)
		brelse(bh);

	return status;
}

int ocfs2_getattr(const struct path *path, struct kstat *stat,
		  u32 request_mask, unsigned int flags)
{
	struct inode *inode = d_inode(path->dentry);
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	int err;

	if (ocfs2_test_invalid_fs(osb))
		return -EIO;

	err = ocfs2_inode_revalidate(path->dentry);
	if (err) {
		if (err != -ENOENT)
			mlog_errno(err);
		goto bail;
	}

	generic_fillattr(inode, stat);
	/*
	 * If there is inline data in the inode, the inode will normally not
	 * have data blocks allocated (it may have an external xattr block).
	 * Report at least one sector for such files, so tools like tar, rsync,
	 * others don't incorrectly think the file is completely sparse.
	 */
	if (unlikely(OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL))
		stat->blocks += (stat->size + 511)>>9;

	/* We set the blksize from the cluster size for performance */
	stat->blksize = osb->s_clustersize;

bail:
	return err;
}

int ocfs2_permission(struct inode *inode, int mask)
{
	int ret, had_lock;
	struct ocfs2_lock_holder *oh;
	struct buffer_head *di_bh = NULL;

	if (ocfs2_test_invalid_fs(OCFS2_SB(inode->i_sb)))
		return -EACCES;

	if (mask & MAY_NOT_BLOCK)
		return -ECHILD;

	had_lock = ocfs2_inode_lock_tracker(inode, &di_bh, 0, &oh);
	if (had_lock < 0) {
		ret = had_lock;
		if (had_lock != -ENOENT)
			mlog_errno(had_lock);
		goto out;
	} else if (had_lock) {
		/* See comments in ocfs2_setattr() for details.
		 * The call chain of this case could be:
		 * do_sys_open()
		 *  may_open()
		 *   inode_permission()
		 *    ocfs2_permission()
		 *     ocfs2_iop_get_acl()
		 */
		mlog(ML_ERROR, "Another case of recursive locking:\n");
		dump_stack();
	}

	ret = generic_permission(inode, mask);

	ocfs2_inode_unlock_tracker(inode, 0, &oh, had_lock);
	if (di_bh && !had_lock) {
		brelse(di_bh);
	}
out:
	return ret;
}

static int __ocfs2_write_remove_suid(struct inode *inode,
				     struct buffer_head *bh)
{
	int ret;
	handle_t *handle;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct ocfs2_dinode *di;

	trace_ocfs2_write_remove_suid(
			(unsigned long long)OCFS2_I(inode)->ip_blkno,
			inode->i_mode);

	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		mlog_errno(ret);
		goto out;
	}

	ret = ocfs2_journal_access_di(handle, INODE_CACHE(inode), bh,
				      OCFS2_JOURNAL_ACCESS_WRITE);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_trans;
	}

	inode->i_mode &= ~S_ISUID;
	if ((inode->i_mode & S_ISGID) && (inode->i_mode & S_IXGRP))
		inode->i_mode &= ~S_ISGID;

	di = (struct ocfs2_dinode *) bh->b_data;
	di->i_mode = cpu_to_le16(inode->i_mode);
	ocfs2_update_inode_fsync_trans(handle, inode, 0);

	ocfs2_journal_dirty(handle, bh);

out_trans:
	ocfs2_commit_trans(osb, handle);
out:
	return ret;
}

static int ocfs2_write_remove_suid(struct inode *inode)
{
	int ret;
	struct buffer_head *bh = NULL;

	ret = ocfs2_read_inode_block(inode, &bh);
	if (ret < 0) {
		mlog_errno(ret);
		goto out;
	}

	ret =  __ocfs2_write_remove_suid(inode, bh);
out:
	brelse(bh);
	return ret;
}

static int ocfs2_split_written_extents(struct inode *inode,
		struct buffer_head *di_bh, u32 cpos, u32 phys_cpos, u32 clusters)
{
	int ret, credits;
	struct ocfs2_dinode *di = (struct ocfs2_dinode *)di_bh->b_data;
	struct ocfs2_extent_tree et;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	unsigned int extents_to_split;
	struct ocfs2_cached_dealloc_ctxt dealloc;
	struct ocfs2_alloc_context *meta_ac = NULL;
	handle_t *handle;

	ocfs2_init_dealloc_ctxt(&dealloc);
	ocfs2_init_dinode_extent_tree(&et, INODE_CACHE(inode), di_bh);

	/*
	 * Assume worst case - that we're writing in
	 * the middle of the extent.
	 *
	 * We can assume that the write proceeds from
	 * left to right, in which case the extent
	 * insert code is smart enough to coalesce the
	 * next splits into the previous records created.
	 */
	extents_to_split = 2;
	ret = ocfs2_lock_allocators(inode, &et, 0, extents_to_split,
			NULL, &meta_ac);
	if (ret) {
		mlog_errno(ret);
		goto out;
	}

	credits = ocfs2_calc_extend_credits(inode->i_sb, &di->id2.i_list);

	handle = ocfs2_start_trans(osb, credits);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		mlog_errno(ret);
		goto out;
	}

	ret = ocfs2_mark_extent_written(inode, &et, handle, cpos, clusters,
			phys_cpos, meta_ac, &dealloc);
	if (ret < 0)
		mlog_errno(ret);

	ocfs2_commit_trans(osb, handle);

out:
	if (meta_ac)
		ocfs2_free_ac_resource(meta_ac);

	ocfs2_run_deallocs(osb, &dealloc);

	return ret;
}

/*
 * Allocate enough extents to cover the region starting at byte offset
 * start for len bytes. Existing extents are skipped, any extents
 * added are marked as "unwritten".
 */
static int ocfs2_allocate_extents(struct inode *inode,
		struct buffer_head *di_bh, u64 start, u64 len, int mark_unwritten)
{
	int ret = 0;
	u32 cpos, phys_cpos, clusters, alloc_size;
	u64 end = start + len;
	unsigned int extent_flags = 0;

	if (OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
		/*
		 * Nothing to do if the requested reservation range
		 * fits within the inode.
		 */
		if (ocfs2_size_fits_inline_data(di_bh, end))
			goto out;

		ret = ocfs2_convert_inline_data_to_extents(inode, di_bh);
		if (ret) {
			mlog_errno(ret);
			goto out;
		}
	}

	/*
	 * We consider both start and len to be inclusive.
	 */
	cpos = start >> OCFS2_SB(inode->i_sb)->s_clustersize_bits;
	clusters = ocfs2_clusters_for_bytes(inode->i_sb, start + len);
	clusters -= cpos;

	while (clusters) {
		ret = ocfs2_get_clusters(inode, cpos, &phys_cpos,
					 &alloc_size, &extent_flags);
		if (ret) {
			mlog_errno(ret);
			goto out;
		}

		/*
		 * Hole or existing extent len can be arbitrary, so
		 * cap it to our own allocation request.
		 */
		if (alloc_size > clusters)
			alloc_size = clusters;

		if ((extent_flags & OCFS2_EXT_UNWRITTEN) && !mark_unwritten) {
			ret = ocfs2_split_written_extents(inode, di_bh, cpos,
					phys_cpos, alloc_size);
			if (ret) {
				mlog_errno(ret);
				goto out;
			}
		}

		if (phys_cpos) {
			/*
			 * We already have an allocation at this
			 * region so we can safely skip it.
			 */
			goto next;
		}

		ret = ocfs2_extend_allocation(inode, cpos, alloc_size, mark_unwritten);
		if (ret) {
			if (ret != -ENOSPC)
				mlog_errno(ret);
			goto out;
		}

next:
		cpos += alloc_size;
		clusters -= alloc_size;
	}

out:

	return ret;
}

#define BUF_LEN			255
#define CMD_LEN			16
#define MAX_COPY_LEN		(4 * 1024 * 1024)

static inline void ocfs2_req_wait_init(struct o2hb_io_wait_ctxt *rb)
{
	atomic_set(&rb->wc_num_reqs, 1);
	init_completion(&rb->wc_io_complete);
	rb->wc_error = 0;
}

static inline void ocfs2_req_wait_dec(struct o2hb_io_wait_ctxt *rb)
{
	if (atomic_dec_and_test(&rb->wc_num_reqs))
		complete(&rb->wc_io_complete);
}

static void ocfs2_wait_on_req(struct o2hb_io_wait_ctxt *rb)
{
	ocfs2_req_wait_dec(rb);
	wait_for_completion(&rb->wc_io_complete);
}

static int ocfs2_vpd_inquiry(struct block_device *bdev, unsigned char *buf,
		unsigned int buf_len, u8 page)
{
	int result;
	unsigned char cmd[CMD_LEN] = {0};

	if (buf_len < 4)
		return -EINVAL;

	cmd[0] = INQUIRY;
	cmd[1] = 1; /* EVPD */
	cmd[2] = page;
	cmd[3] = buf_len >> 8;
	cmd[4] = buf_len & 0xff;
	cmd[5] = 0; /* control byte */

	result = o2hb_execute_req(bdev, REQ_OP_SCSI_IN, buf, buf_len, cmd, NULL, 0);
	if (result < 0) {
		mlog_errno(result);
		return result;
	}

	/* Sanity check that we got the page back that we asked for */
	if (buf[1] != page) {
		mlog(ML_ERROR, "VPD query page is not the same\n");
		return -EIO;
	}

	return get_unaligned_be16(&buf[2]) + 4;
}

static int ocfs2_lookup_naa(unsigned char *naa_desc, struct block_device *bdev)
{
	unsigned int vpd_len;
	unsigned char buf[BUF_LEN] = {0};
	unsigned char *vpd_buf;
	int result;

	result = ocfs2_vpd_inquiry(bdev, buf, BUF_LEN, 0x83);
	if (result < 0)
		return result;

	if (buf[1] != 0x83 || get_unaligned_be16(&buf[2]) == 0) {
		mlog(ML_ERROR, "VPD page 0x83 contains no descriptors\n");
		return -EINVAL;
	}

	vpd_buf = buf + 4;
	vpd_len = result - 4;

	do {
		unsigned int desig_len = vpd_buf[3] + 4;

		/* Binary code set */
		if ((vpd_buf[0] & 0xf) != 1)
			goto skip;

		/* Target association */
		if ((vpd_buf[1] >> 4) & 0x3)
			goto skip;

		/* NAA designator */
		if ((vpd_buf[1] & 0xf) != 0x3)
			goto skip;

		/* Identification descriptor target descriptor (32 bytes) */
		memset(naa_desc, 0, OCFS2_DISK_NAME_LEN);
		naa_desc[0] = 0xe4; /* Identification */
		memcpy(naa_desc + 4, vpd_buf, desig_len); /* NAA descriptor */
		naa_desc[30] = (512 >> 8) & 0xff; /* Device type specific parameters */
		naa_desc[31] = 512 & 0xff;

		return 0;

skip:
		vpd_buf += desig_len;
		vpd_len -= desig_len;
	} while (vpd_len > 0);

	mlog(ML_ERROR, "VPD page 0x83 NAA descriptor not found\n");
	return -EINVAL;
}

static int ocfs2_get_scsi_dev_seg(struct dev_segment *dev_seg,
		struct list_head *scsi_dev_list, struct dev_segment **scsi_dev_seg)
{
	int ret = 0;
	struct dev_segment *tmp_scsi_dev_seg = NULL;

	INIT_LIST_HEAD(scsi_dev_list);
	ret = dm_get_device_segment(dev_seg->dvd, scsi_dev_list);
	if (ret == -ENOENT) {
		/* map from multilun device to scsi device */
		tmp_scsi_dev_seg = dev_seg;
	} else if (ret) {
		mlog_errno(ret);
		return ret;
	} else {
		/*
		 * first, map from multilun device to multipath device.
		 * then, map from multipath device to scsi device.
		 */
		tmp_scsi_dev_seg = list_first_entry(scsi_dev_list, typeof(*dev_seg), list);
		if (tmp_scsi_dev_seg == NULL) {
			ret = -EINVAL;
			mlog_errno(ret);
			return ret;
		}
	}

	/* here, the scsi_dev_seg should be scsi device. */
	if (!strncmp(tmp_scsi_dev_seg->disk_name, "dm", strlen("dm"))) {
		if (tmp_scsi_dev_seg != dev_seg)
			o2hb_free_device_list(scsi_dev_list);

		ret = -EINVAL;
		mlog(ML_ERROR, "the device name is %s, it should not be dm device\n",
			 tmp_scsi_dev_seg->disk_name);
		return ret;
	}

	*scsi_dev_seg = tmp_scsi_dev_seg;

	return ret;
}

static int ocfs2_xcopy_blkdev_zeroout(struct ocfs2_super *osb, u64 len,
		struct list_head *dev_list, u64 physical_zero_start)
{
	int ret = 0;
	struct dev_segment *scsi_dev_seg = NULL, *dev_seg = NULL;
	u64 last_seg_len = 0, dst_zero_start, dst_zero_len,
		tmp_len = len, tmp_physical_zero_start = physical_zero_start;
	struct block_device *bdev = NULL;
	dev_t bd_dev = MKDEV(0, 0);
	struct list_head scsi_dev_list;

	list_for_each_entry(dev_seg, dev_list, list) {
		tmp_physical_zero_start -= last_seg_len;
		last_seg_len = dev_seg->len;

		if (dev_seg->len <= tmp_physical_zero_start)
			continue;

		dst_zero_start = dev_seg->start + tmp_physical_zero_start;
		dst_zero_len = dev_seg->len - tmp_physical_zero_start;
		dst_zero_len = min(dst_zero_len, tmp_len);

		ret = ocfs2_get_scsi_dev_seg(dev_seg, &scsi_dev_list, &scsi_dev_seg);
		if (ret)
			goto out;

		bd_dev = scsi_dev_seg->dvd;
		if (scsi_dev_seg != dev_seg)
			o2hb_free_device_list(&scsi_dev_list);

		bdev = ocfs2_bdget(bd_dev);
		if (!bdev) {
			mlog(ML_ERROR, "%s Xcopy: get bdev failed!\n", osb->uuid_str);
			ret = -ENOMEM;
			goto out;
		}

		ret = blkdev_issue_zeroout(bdev, dst_zero_start >> 9,
				dst_zero_len >> 9, GFP_NOFS, BLKDEV_ZERO_NOUNMAP);
		ocfs2_bdput(bdev);
		if (ret < 0) {
			mlog(ML_ERROR, "%s Xcopy: failed blkdev_issue_zeroout, ret = %d",
				 osb->uuid_str, ret);
			goto out;
		}
		tmp_physical_zero_start += dst_zero_len;
		tmp_len -= dst_zero_len;
		if (!tmp_len)
			break;
	}

	if (tmp_len) {
		mlog(ML_ERROR, "%s Xcopy: should not be here. Left length is %llu.",
			 osb->uuid_str, tmp_len);
		ret = -EINVAL;
	}

out:
	return ret;
}

static int ocfs2_xcopy_zero(struct ocfs2_super *osb, struct ocfs2_extent_rec *rec,
	u64 start_address, u64 len, struct list_head *dev_list)
{
	u64 physical_zero_start;
	u64 rec_phys_start, rec_vir_start;

	rec_phys_start = le64_to_cpu(rec->e_blkno) << osb->sb->s_blocksize_bits;
	rec_vir_start = (u64) le32_to_cpu(rec->e_cpos) << osb->s_clustersize_bits;
	if (start_address < rec_vir_start) {
		mlog(ML_ERROR, "%s Xcopy: rec_vir_start(%llu)  should not"
					   " be larger than start_address(%llu)!\n", osb->uuid_str,
				rec_vir_start, start_address);
		return -EINVAL;
	}

	physical_zero_start = rec_phys_start + start_address - rec_vir_start;
	return ocfs2_xcopy_blkdev_zeroout(osb, len, dev_list, physical_zero_start);
}

static int ocfs2_setup_xcopy_cmd(struct block_device *bdev, u64 copy_bytes,
		unsigned char *src_desc, u64 src_lba,
		unsigned char *dst_desc, u64 dst_lba,
		struct o2hb_io_wait_ctxt *rb)
{
	unsigned char buf[BUF_LEN] = {0};
	unsigned int buf_len = 0;
	unsigned char cmd[CMD_LEN] = {0};
	int ret = 0;

	/* Extended Copy (LID1) Parameter List (16 bytes) */
	buf[0] = 0;								/* LID */
	buf[1] = 3 << 3;						/* LID usage 11b */
	put_unaligned_be16(32 + 32, &buf[2]);	/* 32 bytes per E4 desc. */
	put_unaligned_be32(28, &buf[8]);		/* 28 bytes per B2B desc. */
	buf_len += 16;

	/* Source CSCD (32 bytes) */
	memcpy(buf + buf_len, src_desc, 32);
	buf_len += 32;

	/* Destination CSCD (32 bytes) */
	memcpy(buf + buf_len, dst_desc, 32);
	buf_len += 32;

	/* Segment descriptor (28 bytes) */
	buf[buf_len] = 0x02;							/* Block to block desc. */
	put_unaligned_be16(0x18, &buf[buf_len + 2]);	/* Descriptor length */
	put_unaligned_be16(0, &buf[buf_len + 4]);		/* Source is desc. 0 */
	put_unaligned_be16(1, &buf[buf_len + 6]);		/* Dest. is desc. 1 */
	put_unaligned_be16(copy_bytes >> 9, &buf[buf_len + 10]);
	put_unaligned_be64(src_lba >> 9, &buf[buf_len + 12]);
	put_unaligned_be64(dst_lba >> 9, &buf[buf_len + 20]);
	buf_len += 28;

	/* CDB */
	cmd[0] = EXTENDED_COPY;
	cmd[1] = 0; /* LID1 */
	put_unaligned_be32(buf_len, &cmd[10]);

	ret = o2hb_execute_req(bdev, REQ_OP_SCSI_OUT, buf, buf_len, cmd, rb, 1);
	if (ret < 0)
		mlog_errno(ret);

	return ret;
}

static int ocfs2_copy_one_extent(u64 dst_xcopy_start, u64 dst_xcopy_len,
		struct dev_segment *dev_seg, struct ocfs2_device_extent_rec *extent,
		struct o2hb_io_wait_ctxt *rb)
{
	struct block_device *bdev;
	u64 copy_bytes;
	int ret = 0;

	bdev = ocfs2_bdget(dev_seg->dvd);
	if (!bdev) {
		mlog(ML_ERROR, "Xcopy: get bdev failed.\n");
		return -ENOMEM;
	}

	ret = ocfs2_lookup_naa(dev_seg->disk_name, bdev);
	if (ret < 0) {
		mlog_errno(ret);
		goto out;
	}

	while (dst_xcopy_len > 0) {
		copy_bytes = min(dst_xcopy_len, (u64)MAX_COPY_LEN);

		mlog(ML_DEBUG, "phys off(%llu), dest off(%llu), len(%llu).\n",
				extent->phy_offset, dst_xcopy_start, copy_bytes);
		ret = ocfs2_setup_xcopy_cmd(bdev, copy_bytes,
				extent->disk_name, extent->phy_offset,
				dev_seg->disk_name, dst_xcopy_start, rb);
		if (ret < 0) {
			mlog_errno(ret);
			goto out;
		}
		extent->phy_offset += copy_bytes;
		extent->length -= copy_bytes;
		dst_xcopy_start += copy_bytes;
		dst_xcopy_len -= copy_bytes;
	}

out:
	ocfs2_bdput(bdev);
	return ret;
}

static int ocfs2_xcopy_list_entry(struct ocfs2_super *osb, struct list_head *dev_list,
		struct ocfs2_device_extent_rec *extent, struct o2hb_io_wait_ctxt *rb,
		u64 dst_start, u64 dst_len)
{
	int ret = 0;
	struct dev_segment *dev_seg = NULL;
	struct dev_segment *scsi_dev_seg = NULL;
	u64 dst_xcopy_start, dst_xcopy_len, last_seg_len = 0;
	u64 tmp_dst_start = dst_start, tmp_dst_len = dst_len;
	struct list_head scsi_dev_list;

	list_for_each_entry(dev_seg, dev_list, list) {
		tmp_dst_start -= last_seg_len;
		last_seg_len = dev_seg->len;

		if (dev_seg->len <= tmp_dst_start)
			continue;

		ret = ocfs2_get_scsi_dev_seg(dev_seg, &scsi_dev_list, &scsi_dev_seg);
		if (ret)
			goto out;

		dst_xcopy_start = dev_seg->start + tmp_dst_start;
		dst_xcopy_len = dev_seg->len - tmp_dst_start;
		dst_xcopy_len = min(dst_xcopy_len, tmp_dst_len);

		ret = ocfs2_copy_one_extent(dst_xcopy_start, dst_xcopy_len,
				scsi_dev_seg, extent, rb);
		if (ret < 0) {
			if (scsi_dev_seg != dev_seg)
				o2hb_free_device_list(&scsi_dev_list);
			mlog_errno(ret);
			goto out;
		}

		if (scsi_dev_seg != dev_seg)
			o2hb_free_device_list(&scsi_dev_list);

		tmp_dst_start += dst_xcopy_len;
		tmp_dst_len -= dst_xcopy_len;
		if (!tmp_dst_len)
			break;
	}

out:
	return ret;
}

static int ocfs2_xcopy_extent(struct inode *inode, u64 src_start_base,
	u64 dst_start_base, struct ocfs2_device_extent_rec *extent,
	struct buffer_head *di_bh, struct list_head *dev_list,
	struct o2hb_io_wait_ctxt *rb)
{
	int ret = 0, is_last = 0;
	u32 cpos;
	u64 extent_start, extent_len, dst_start, dst_len;
	u64 len_bytes, phys_bytes, vir_bytes;
	unsigned int hole_size;
	struct ocfs2_extent_rec rec;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct block_device *bdev = inode->i_sb->s_bdev;

	extent_start = extent->pos - src_start_base + dst_start_base;
	extent_len = extent->length;

	mlog(ML_DEBUG, "%s: extent pos(%llu) ,dest extent pos(%llu), extent len(%llu).\n",
			osb->uuid_str, extent->pos, extent_start, extent_len);
	cpos = extent_start >> osb->s_clustersize_bits;
	while (extent_len > 0 && !is_last) {
		ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
					&hole_size, &rec, &is_last);
		if (ret < 0) {
			mlog_errno(ret);
			goto out;
		}

		/*can not be here*/
		if (rec.e_blkno == 0ULL) {
			mlog(ML_ERROR,
				"%s Xcopy: address %u (in cluster) should not be in a hole. ",
				osb->uuid_str, cpos);
			ret = -EINVAL;
			goto out;
		}

		len_bytes = (u64)le16_to_cpu(rec.e_leaf_clusters)
			<< osb->s_clustersize_bits;
		phys_bytes = le64_to_cpu(rec.e_blkno)
			<< osb->sb->s_blocksize_bits;
		vir_bytes = (u64)le32_to_cpu(rec.e_cpos)
			<< osb->s_clustersize_bits;

		dst_start = phys_bytes + extent_start - vir_bytes;
		dst_len = vir_bytes + len_bytes - extent_start;
		dst_len = min(dst_len, extent_len);

		extent_start += dst_len;
		extent_len -= dst_len;

		if (dst_start + dst_len > i_size_read(bdev->bd_inode)) {
			mlog(ML_ERROR,
				"%s Xcopy: content size is larger than device size.",
				osb->uuid_str);
			ret = -EINVAL;
			goto out;
		}

		mlog(ML_DEBUG, "%s: dest start(%llu), dst len(%llu).\n",
			 osb->uuid_str, dst_start, dst_len);
		ret = ocfs2_xcopy_list_entry(osb, dev_list, extent, rb, dst_start, dst_len);
		if (ret)
			goto out;

		cpos = le32_to_cpu(rec.e_cpos) + le16_to_cpu(rec.e_leaf_clusters);
	}
out:
	return ret;
}

static int ocfs2_xcopy_fill_extent(struct ocfs2_device_extent_rec *extent,
		unsigned int src_mapped_extents,
		struct ocfs2_device_extent_info *dev_extent_info)
{
	int i, ret = 0;
	struct ocfs2_device_extent_rec __user *src_start = dev_extent_info->ei_extents_start;
	struct ocfs2_device_extent_rec *cfr_src_start = dev_extent_info->ei_cfr_extents_start;

	for (i = 0; i < src_mapped_extents; i++) {
		if (dev_extent_info->is_cfr == 1) {
			memcpy(&extent[i], cfr_src_start, sizeof(struct ocfs2_device_extent_rec));
			cfr_src_start++;
		} else {
			if (copy_from_user(&extent[i], src_start, sizeof(extent[i]))) {
				ret = -EFAULT;
				break;
			}
			src_start++;
		}
	}

	return ret;
}

static int __ocfs2_extended_copy(struct inode *inode,
		struct buffer_head *di_bh, u64 start, u64 len,
		struct ocfs2_device_extent_info *dev_extent_info,
		struct list_head *dev_list)
{
	u32 cpos;
	u64 zero_len, zero_start;
	u64  src_start_base, extent_start, extent_len;
	int ret = 0, is_last = 0, i;
	unsigned int hole_size;
	unsigned int src_mapped_extents = dev_extent_info->ei_mapped_extents;
	struct ocfs2_extent_rec rec;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct ocfs2_device_extent_rec *extent;
	struct o2hb_io_wait_ctxt rb;

	extent = kcalloc(src_mapped_extents,
			sizeof(struct ocfs2_device_extent_rec), GFP_NOFS);
	if (!extent)
		return -ENOMEM;

	ret = ocfs2_xcopy_fill_extent(extent, src_mapped_extents, dev_extent_info);
	if (ret)
		goto out_free;

	/* initialize req batch */
	ocfs2_req_wait_init(&rb);

	src_start_base = extent[0].pos;
	for (i = 0; i < src_mapped_extents; i++) {
		extent_start = extent[i].pos - src_start_base + start;
		extent_len = extent[i].length;
		cpos = extent_start >> osb->s_clustersize_bits;

		if (extent[i].flag & OCFS2_XCOPY_EXTENT_HOLE) {
			ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
					&hole_size, &rec, &is_last);
			if (ret < 0) {
				mlog_errno(ret);
				goto out;
			}

			if ((rec.e_blkno != 0ULL) && (!(rec.e_flags & OCFS2_EXT_UNWRITTEN))) {
				zero_len = osb->s_clustersize
					- (extent_start & (osb->s_clustersize - 1));
				zero_len = min(zero_len, extent_len);
				ret = ocfs2_xcopy_zero(osb, &rec, extent_start, zero_len, dev_list);
				if (ret < 0) {
					mlog(ML_ERROR,
						"%s Xcopy: failed to pad hole extent[%d], source extent is a hole and the dest extent is written.",
						osb->uuid_str, i);
					goto out;
				}
			}
			continue;
		}

		if (extent[i].flag & OCFS2_XCOPY_EXTENT_UNWRITTEN) {
			ret = ocfs2_allocate_extents(inode, di_bh,
					extent_start, extent_len, 1);
			if (ret < 0) {
				mlog(ML_ERROR,
					"%s Xcopy: failed to allocate extents. ret: %d, start: %llu, len:%llu while processing unwritten extent.",
					osb->uuid_str, ret, extent_start, extent_len);
				goto out;
			}

			ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
					&hole_size, &rec, &is_last);
			if (ret < 0) {
				mlog_errno(ret);
				goto out;
			}

			if ((rec.e_blkno != 0ULL) && (!(rec.e_flags & OCFS2_EXT_UNWRITTEN))) {
				zero_len = osb->s_clustersize
					- (extent_start & (osb->s_clustersize - 1));
				zero_len = min(zero_len, extent_len);
				ret = ocfs2_xcopy_zero(osb, &rec, extent_start, zero_len, dev_list);
				if (ret < 0) {
					mlog(ML_ERROR,
						"%s Xcopy: failed to pad unwritten extent[%d], source extent is unwritten and dest extent is written.",
						osb->uuid_str, i);
					goto out;
				}
			}
			continue;
		}

		ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
			&hole_size, &rec, &is_last);
		if (ret < 0) {
			mlog_errno(ret);
			goto out;
		}

		if ((rec.e_blkno != 0ULL) && (rec.e_flags & OCFS2_EXT_UNWRITTEN)) {
			zero_len = extent_start & (osb->s_clustersize - 1);
			zero_start = (extent_start >> osb->s_clustersize_bits)
				<<  osb->s_clustersize_bits;
			ret = ocfs2_xcopy_zero(osb, &rec, zero_start, zero_len, dev_list);
			if (ret < 0) {
				mlog(ML_ERROR,
					"%s Xcopy: failed to pad unwritten hole[%d], source extent is written and dest extent is unwritten.",
					osb->uuid_str, i);
				goto out;
			}
		}

		ret = ocfs2_allocate_extents(inode, di_bh, extent_start, extent_len, 0);
		if (ret < 0) {
			mlog(ML_ERROR,
				"%s Xcopy: failed to allocate extents. ret: %d, start: %llu, len:%llu while processing normal extent.",
				osb->uuid_str, ret, extent_start, extent_len);
			goto out;
		}

		/*
		 * Pad the hole if the extent is newly allocated
		 * and the start address is not aligned to
		 * cluster size.
		 */
		if ((rec.e_blkno == 0ULL) && (extent_start & (osb->s_clustersize - 1))) {
			cpos = extent_start >> osb->s_clustersize_bits;
			ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
				&hole_size, &rec, &is_last);
			if (ret < 0) {
				mlog_errno(ret);
				goto out;
			}
			if (rec.e_blkno == 0ULL) {
				mlog(ML_ERROR,
					"%s Xcopy: could not find the newly allocated extent! address:%llu",
					osb->uuid_str,
					(u64)cpos << osb->s_clustersize_bits);
				ret = -EINVAL;
				goto out;
			}

			zero_start = (extent_start >> osb->s_clustersize_bits)
				<<  osb->s_clustersize_bits;
			zero_len = extent_start & (osb->s_clustersize - 1);
			ret = ocfs2_xcopy_zero(osb, &rec, zero_start, zero_len, dev_list);
			if (ret < 0) {
				mlog(ML_ERROR,
					"%s Xcopy: failed to pad hole[%d], start address is not aligned to newly allocated cluster.",
					osb->uuid_str, i);
				goto out;
			}
		}

		ret = ocfs2_xcopy_extent(inode, src_start_base, start, extent + i,
			di_bh, dev_list, &rb);
		if (ret < 0) {
			mlog(ML_ERROR, "%s Xcopy: ocfs2_xcopy_extent failed!",
				osb->uuid_str);
			goto out;
		}

		if (extent[i].length) {
			mlog(ML_ERROR,
				"%s Xcopy: should not be here! extent[%d].length is %llu",
				osb->uuid_str, i, extent[i].length);
			ret = -EINVAL;
			goto out;
		}

		/*pad the hole, if the end address is not aligned to cluster size*/
		if ((extent_start + extent_len) & (osb->s_clustersize - 1)) {
			cpos = (extent_start + extent_len) >> osb->s_clustersize_bits;
			ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
					&hole_size, &rec, &is_last);
			if (ret < 0) {
				mlog_errno(ret);
				goto out;
			}
			if (rec.e_blkno == 0ULL) {
				mlog(ML_ERROR,
					"%s Xcopy: should not be here! address:%llu",
					osb->uuid_str,
					(u64)cpos << osb->s_clustersize_bits);
				ret = -EINVAL;
				goto out;
			}

			zero_start = extent_start + extent_len;
			zero_len = osb->s_clustersize
				- ((extent_start + extent_len) & (osb->s_clustersize - 1));
			ret = ocfs2_xcopy_zero(osb, &rec, zero_start, zero_len, dev_list);
			if (ret < 0) {
				mlog(ML_ERROR,
					"%s Xcopy: failed to pad hole extent[%d], end address is not aligned to cluster size",
					osb->uuid_str, i);
				goto out;
			}
		}
	}
out:
	ocfs2_wait_on_req(&rb);
	if (rb.wc_error) {
		ret = -EIO;
		mlog(ML_ERROR, "%s Xcopy: failed ocfs2_wait_on_req. ret=%d.",
			osb->uuid_str, ret);
	}

out_free:
	kfree(extent);
	return ret;
}

int ocfs2_extended_copy(struct file *filp, u64 start, u64 len,
		struct ocfs2_device_extent_info *dev_extent_info)
{
	int ret = 0;
	handle_t *handle;
	journal_t *journal;
	struct inode *inode = d_inode(filp->f_path.dentry);
	struct buffer_head *di_bh = NULL;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct list_head dev_list;
	int xcopy_switch;

	if (ocfs2_test_invalid_fs(osb)) {
		mlog(ML_ERROR, "%s Xcopy: OCFS2 invalid because of disk timeout.\n",
			osb->uuid_str);
		return -EIO;
	}

	xcopy_switch = ocfs2_get_vaai_switch_state_nolock(osb, OCFS2_XCOPY_STATE);
	if (xcopy_switch < 0) {
		mlog_errno(xcopy_switch);
		return xcopy_switch;
	}

	spin_lock(&osb->osb_lock);
	if (!xcopy_switch || !osb->osb_xcopy_support) {
		spin_unlock(&osb->osb_lock);
		mlog(ML_ERROR, "%s Xcopy is disabled!\n", osb->uuid_str);
		return -EINVAL;
	}
	spin_unlock(&osb->osb_lock);

	if (len == 0)
		return 0;

	if ((start & 0xFFFF) || (len & 0xFFFF) || osb->s_clustersize & 0xFFFF) {
		mlog(ML_ERROR,
			"%s Xcopy: start or len or cluster size is not aligned to 64KB, start = %llu, len = %llu, cluster_size = %d.\n",
			osb->uuid_str, start, len, osb->s_clustersize);
		return -EINVAL;
	}

	INIT_LIST_HEAD(&dev_list);
	ret = dm_get_device_segment(inode->i_sb->s_bdev->bd_dev, &dev_list);
	if (ret == -ENOENT) {
		/* ocfs2 volume not a dm device */
		ret = o2hb_get_dev_segment(osb->sb->s_bdev, &dev_list);
	}

	if (ret < 0) {
		mlog(ML_ERROR, "%s Xcopy: get dev segment failed, err: %d.\n",
				osb->uuid_str, ret);
		goto out;
	}

	if (list_empty(&dev_list)) {
		mlog(ML_ERROR, "%s Xcopy: dev segment is NULL.\n", osb->uuid_str);
		ret = -EINVAL;
		goto out;
	}

	inode_lock(inode);

	ret = ocfs2_rw_lock(inode, 1);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_mutex_unlock;
	}

	ret = ocfs2_inode_lock(inode, &di_bh, 1);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_rw_unlock;
	}

	down_write(&OCFS2_I(inode)->ip_alloc_sem);

	if (OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
		mlog(ML_ERROR, "%s Xcopy: Do not support inline data.\n",
			osb->uuid_str);
		ret = -EINVAL;
		goto out_ip_unlock;
	}

	/* Ensure file data in page_cache is flushed into disk */
	ret = file_write_and_wait_range(filp, start, start + len - 1);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_ip_unlock;
	}

	/*
	 * Invalidate clean cached pages to ensure all the data read after
	 * extended copy operation is valid.
	 */
	if (inode->i_mapping->nrpages) {
		ret = invalidate_inode_pages2_range(inode->i_mapping,
				start >> PAGE_SHIFT,
				(start + len - 1) >> PAGE_SHIFT);
		if (ret < 0) {
			mlog_errno(ret);
			goto out_ip_unlock;
		}
	}

	ret = __ocfs2_extended_copy(inode, di_bh, start, len,
			dev_extent_info, &dev_list);
	if (ret < 0) {
		mlog(ML_ERROR,
			"%s Xcopy: extended copy return %d, start %llu, len %llu.\n",
			osb->uuid_str, ret, start, len);
		goto out_ip_unlock;
	}

	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		mlog_errno(ret);
		goto out_ip_unlock;
	}

	if (start + len > i_size_read(inode))
		i_size_write(inode, start + len);

	inode->i_mtime = inode->i_ctime = current_time(inode);
	ret = ocfs2_mark_inode_dirty(handle, inode, di_bh);
	ocfs2_commit_trans(osb, handle);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_ip_unlock;
	}

	journal = osb->journal->j_journal;
	ret = jbd2_journal_force_commit(journal);
	if (ret < 0)
		mlog_errno(ret);

out_ip_unlock:
	up_write(&OCFS2_I(inode)->ip_alloc_sem);
	brelse(di_bh);
	ocfs2_inode_unlock(inode, 1);

out_rw_unlock:
	ocfs2_rw_unlock(inode, 1);

out_mutex_unlock:
	inode_unlock(inode);

out:
	o2hb_free_device_list(&dev_list);
	return ret;
}

static int ocfs2_add_hole_extent(struct ocfs2_device_extent_info *dev_extent_info,
		u64 hole_size, u64 virt_start)
{
	struct ocfs2_device_extent_rec dev_extent;
	struct ocfs2_device_extent_rec __user *dest_extent;
	struct ocfs2_device_extent_rec *cfr_dest_extent;

	memset(&dev_extent, 0, sizeof(dev_extent));
	dev_extent.phy_offset = 0;
	dev_extent.length = hole_size;
	dev_extent.pos = virt_start;
	dev_extent.flag = OCFS2_XCOPY_EXTENT_HOLE;

	if (dev_extent_info->is_cfr == 1) {
		cfr_dest_extent = dev_extent_info->ei_cfr_extents_start +
						  dev_extent_info->ei_mapped_extents;
		memcpy(cfr_dest_extent, &dev_extent, sizeof(dev_extent));
	} else {
		dest_extent = dev_extent_info->ei_extents_start +
					  dev_extent_info->ei_mapped_extents;
		if (copy_to_user(dest_extent, &dev_extent,
				sizeof(dev_extent))) {
			return -EFAULT;
		}
	}

	dev_extent_info->ei_mapped_extents++;

	return 0;
}

int ocfs2_query_device_addr(struct file *filp, u64 start, u64 len,
		struct ocfs2_device_extent_info *dev_extent_info, unsigned int cmd)
{
	int ret = 0, is_last;
	unsigned int hole_size;
	u32 mapping_end, cpos;
	u64 len_bytes, phys_bytes, virt_bytes, hole_bytes;
	u64 query_fs_phys_start, query_fs_virt_start, query_len, last_seg_len = 0;
	struct inode *inode = d_inode(filp->f_path.dentry);
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct buffer_head *di_bh = NULL;
	struct ocfs2_extent_rec rec;
	struct ocfs2_device_extent_rec dev_extent;
	struct ocfs2_device_extent_rec __user *dest_extent
			= dev_extent_info->ei_extents_start;
	struct dev_segment *dev_seg = NULL;
	struct block_device *bdev;
	struct list_head dev_list;
	int xcopy_switch;
	struct dev_segment *scsi_dev_seg = NULL;
	struct list_head scsi_dev_list;
	dev_t bd_dev = MKDEV(0, 0);

	if (ocfs2_test_invalid_fs(osb)) {
		mlog(ML_ERROR,
				"%s: OCFS2 invalid because of disk timeout.\n",
				osb->uuid_str);
		return -EIO;
	}

	if (cmd == OCFS2_IOC_XCOPY_READ) {
		xcopy_switch = ocfs2_get_vaai_switch_state_nolock(osb, OCFS2_XCOPY_STATE);
		if (xcopy_switch < 0) {
			mlog_errno(xcopy_switch);
			return xcopy_switch;
		}

		spin_lock(&osb->osb_lock);
		if (!xcopy_switch || !osb->osb_xcopy_support) {
			spin_unlock(&osb->osb_lock);
			mlog(ML_ERROR, "%s: can not use xcopy\n", osb->uuid_str);
			return -EINVAL;
		}
		spin_unlock(&osb->osb_lock);

		if ((start & 0xFFFF) || (len & 0xFFFF) ||
				(osb->s_clustersize & 0xFFFF)) {
			mlog(ML_ERROR,
				"%s: start or len or cluster size are not a multiple of 64KB, start = %llu, len = %llu, cluster_size = %d.\n",
				osb->uuid_str,
				start, len, osb->s_clustersize);
			return -EINVAL;
		}
	}

	INIT_LIST_HEAD(&dev_list);
	ret = dm_get_device_segment(inode->i_sb->s_bdev->bd_dev, &dev_list);
	if (ret == -ENOENT) {
		/* ocfs2 volume not a dm device */
		ret = o2hb_get_dev_segment(osb->sb->s_bdev, &dev_list);
	}

	if (ret < 0) {
		mlog(ML_ERROR, "%s: get dev segment failed, err: %d.\n",
				osb->uuid_str, ret);
		goto out;
	}

	if (list_empty(&dev_list)) {
		mlog(ML_ERROR, "%s: dev segment is NULL.\n", osb->uuid_str);
		ret = -EINVAL;
		goto out;
	}

	ret = ocfs2_inode_lock(inode, &di_bh, 0);
	if (ret < 0) {
		mlog_errno(ret);
		goto out;
	}

	down_read(&OCFS2_I(inode)->ip_alloc_sem);

	if (OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
		mlog(ML_ERROR, "%s: Do not support inline data.\n", osb->uuid_str);
		ret = -EINVAL;
		goto out_unlock;
	}

	/* Ensure file data in page_cache flush into disk */
	ret = file_write_and_wait_range(filp, start, start + len - 1);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_unlock;
	}

	cpos = start >> osb->s_clustersize_bits;
	mapping_end = ocfs2_clusters_for_bytes(inode->i_sb,
			start + len);
	is_last = 0;
	while (cpos < mapping_end && !is_last) {
		ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
				&hole_size, &rec, &is_last);
		if (ret < 0) {
			mlog_errno(ret);
			goto out_unlock;
		}

		if (rec.e_blkno == 0ULL) {
			hole_bytes = min((u64)(hole_size) << osb->s_clustersize_bits, len);
			ret = ocfs2_add_hole_extent(dev_extent_info, hole_bytes, start);
			if (ret < 0) {
				mlog_errno(ret);
				goto out_unlock;
			}
			cpos += hole_size;
			start += hole_bytes;
			len -= hole_bytes;
			continue;
		}

		len_bytes = (u64)le16_to_cpu(rec.e_leaf_clusters)
				<< osb->s_clustersize_bits;
		phys_bytes = le64_to_cpu(rec.e_blkno)
				<< osb->sb->s_blocksize_bits;
		virt_bytes = (u64)le32_to_cpu(rec.e_cpos)
				<< osb->s_clustersize_bits;

		/* virtual device offset */
		query_fs_virt_start = start;
		query_fs_phys_start = phys_bytes + start - virt_bytes;
		query_len = min((virt_bytes + len_bytes - start), len);

		start += query_len;
		len -= query_len;

		last_seg_len = 0;
		/* one VIMS volume include several device segment, one device segment
		 * is a series of physical blocks. */
		list_for_each_entry(dev_seg, &dev_list, list) {
			query_fs_phys_start -= last_seg_len;
			last_seg_len = dev_seg->len;

			/* query phy offset is not in current segment */
			if (dev_seg->len <= query_fs_phys_start)
				continue;

			if (dev_extent_info->ei_mapped_extents ==
					dev_extent_info->ei_extent_count) {
				mlog(ML_ERROR, "%s: excceed max numbers.\n", osb->uuid_str);
				ret = -EINVAL;
				break;
			}

			ret = ocfs2_get_scsi_dev_seg(dev_seg, &scsi_dev_list, &scsi_dev_seg);
			if (ret)
				break;

			bd_dev = scsi_dev_seg->dvd;
			if (scsi_dev_seg != dev_seg)
				o2hb_free_device_list(&scsi_dev_list);

			if (bd_dev == MKDEV(0, 0)) {
				mlog(ML_ERROR, "Fail to get scsi_dev_seg.\n");
				ret = -EINVAL;
				goto out_unlock;
			}

			memset(&dev_extent, 0, sizeof(dev_extent));
			dev_extent.phy_offset = dev_seg->start + query_fs_phys_start;
			dev_extent.length = min((dev_seg->len - query_fs_phys_start),
					query_len);
			dev_extent.pos = query_fs_virt_start;
			dev_extent.dvd = dev_seg->dvd;
			if (rec.e_flags & OCFS2_EXT_UNWRITTEN)
				dev_extent.flag = OCFS2_XCOPY_EXTENT_UNWRITTEN;

			if (cmd == OCFS2_IOC_XCOPY_READ) {
				bdev = ocfs2_bdget(bd_dev);
				if (!bdev) {
					mlog(ML_ERROR, "%s: get bdev failed.\n", osb->uuid_str);
					ret = -ENOMEM;
					break;
				}

				ret = ocfs2_lookup_naa(dev_seg->disk_name, bdev);
				ocfs2_bdput(bdev);
				if (ret < 0) {
					mlog_errno(ret);
					break;
				}
			}

			memcpy(dev_extent.disk_name, dev_seg->disk_name,
					sizeof(dev_seg->disk_name));
			dest_extent = dev_extent_info->ei_extents_start +
					dev_extent_info->ei_mapped_extents;
			if (copy_to_user(dest_extent, &dev_extent,
					sizeof(dev_extent))) {
				ret = -EFAULT;
				mlog_errno(ret);
				break;
			}

			dev_extent_info->ei_mapped_extents++;

			query_fs_virt_start += dev_extent.length;
			query_fs_phys_start += dev_extent.length;
			query_len -= dev_extent.length;
			if (!query_len)
				break;
		}

		if (ret < 0)
			goto out_unlock;

		cpos = le32_to_cpu(rec.e_cpos) + le16_to_cpu(rec.e_leaf_clusters);
	}

	if (ret > 0)
		ret = 0;

out_unlock:
	brelse(di_bh);
	up_read(&OCFS2_I(inode)->ip_alloc_sem);
	ocfs2_inode_unlock(inode, 0);

out:
	o2hb_free_device_list(&dev_list);
	return ret;
}

void ocfs2_fence_scsi(struct o2nm_node *node, int node_num, void *data,
		u64 hb_generation)
{
	struct ocfs2_super *osb = (struct ocfs2_super *)data;

	if (ocfs2_test_invalid_fs(osb))
		return;

	spin_lock(&osb->osb_lock);
	if (!osb->osb_fence_scsi_support) {
		spin_unlock(&osb->osb_lock);
		return;
	}
	spin_unlock(&osb->osb_lock);

	mlog(ML_NOTICE, "%s: fence node %d\n", osb->uuid_str, node_num);
	o2hb_fence_scsi(osb->sb->s_bdev, node_num);
}

static int __ocfs2_zero_file(struct inode *inode, struct buffer_head *di_bh,
		u64 start, u64 len, unsigned int cmd, int ws_switch)
{
	int ret = 0, is_last;
	u32 cpos;
	unsigned int hole_size;
	u64 len_bytes, phys_bytes, vir_bytes, zero_start;
	u64 zero_len;
	struct ocfs2_extent_rec rec;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct block_device *bdev = inode->i_sb->s_bdev;

	is_last = 0;
	cpos = start >> osb->s_clustersize_bits;

	while (len > 0 && !is_last) {
		ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
				&hole_size, &rec, &is_last);
		if (ret)
			goto out;

		/* FIXME? can not be here*/
		if (rec.e_blkno == 0ULL) {
			ocfs2_error(osb->sb, "block number should not be %llu.",
					le64_to_cpu(rec.e_blkno));
			ret = -EINVAL;
			goto out;
		}

		len_bytes = (u64) le16_to_cpu(rec.e_leaf_clusters)
				<< osb->s_clustersize_bits;
		phys_bytes = le64_to_cpu(rec.e_blkno)
				<< osb->sb->s_blocksize_bits;
		vir_bytes = (u64) le32_to_cpu(rec.e_cpos)
				<< osb->s_clustersize_bits;
		/* zero file */
		zero_start = phys_bytes + start - vir_bytes;
		zero_len = vir_bytes + len_bytes - start;
		zero_len = min(zero_len, len);
		if (zero_len <= 0)
			return zero_len;

		if (zero_start + zero_len > i_size_read(bdev->bd_inode))
			return -EINVAL;

		spin_lock(&osb->osb_lock);
		if ((osb->osb_ws_support && ws_switch) ||
				cmd == OCFS2_ZERO_UPDATE) {
			spin_unlock(&osb->osb_lock);
			ret = blkdev_issue_write_same(bdev, zero_start >> 9,
					zero_len >> 9, GFP_NOFS, ZERO_PAGE(0));
		} else {
			spin_unlock(&osb->osb_lock);
			ret = blkdev_issue_zeroout(bdev, zero_start >> 9,
					zero_len >> 9, GFP_NOFS, BLKDEV_ZERO_NOUNMAP);
		}

		if (ret)
			goto out;

		start += zero_len;
		len -= zero_len;
		cpos = le32_to_cpu(rec.e_cpos) + le16_to_cpu(rec.e_leaf_clusters);
	}

out:
	if (ret)
		mlog_errno(ret);

	return ret;
}

int ocfs2_zero_file(struct file *filp, unsigned int cmd,
		struct ocfs2_zero_range *range)
{
	int ret = 0;
	u64 start = range->start;
	u64 len = range->len;
	struct inode *inode = d_inode(filp->f_path.dentry);
	struct buffer_head *di_bh = NULL;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	handle_t *handle;
	journal_t *journal;
	int ws_switch;

	if (ocfs2_test_invalid_fs(osb)) {
		printk_once(KERN_ERR "%s: %s: OCFS2 invalid.\n",
				__func__, osb->uuid_str);
		return -EIO;
	}

	if (OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
		mlog(ML_ERROR, "%s: Do not support inline data.\n", osb->uuid_str);
		return -EINVAL;
	}

	if (len <= 0)
		return 0;

	if ((start & (SECTOR_SIZE - 1)) || (len & (SECTOR_SIZE - 1))) {
		mlog(ML_ERROR,
			"%s: start or len are not a multiple of sector size, start = %llu, len = %llu.\n",
			osb->uuid_str, start, len);
		return -EINVAL;
	}

	ws_switch = ocfs2_get_vaai_switch_state_nolock(osb, OCFS2_WS_STATE);
	if (ws_switch < 0) {
		mlog_errno(ws_switch);
		return ws_switch;
	}

	inode_lock(inode);

	ret = ocfs2_rw_lock(inode, 1);
	if (ret < 0) {
		mlog_errno(ret);
		goto out;
	}

	ret = ocfs2_inode_lock(inode, &di_bh, 1);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_rw_unlock;
	}

	down_write(&OCFS2_I(inode)->ip_alloc_sem);

	/* Ensure file data in page_cache is flushed into disk */
	ret = file_write_and_wait_range(filp, start, start + len - 1);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_ip_unlock;
	}

	/*
	 * Invalidate clean cached pages to ensure all the data read after
	 * writesame operation is valid.
	 */
	if (inode->i_mapping->nrpages) {
		ret = invalidate_inode_pages2_range(inode->i_mapping,
				start >> PAGE_SHIFT,
				(start + len - 1) >> PAGE_SHIFT);
		if (ret < 0) {
			mlog_errno(ret);
			goto out_ip_unlock;
		}
	}

	ret = ocfs2_allocate_extents(inode, di_bh, start, len, 0);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_ip_unlock;
	}

	ret = __ocfs2_zero_file(inode, di_bh, start, len, cmd, ws_switch);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_ip_unlock;
	}

	if (cmd == OCFS2_ZERO_UPDATE) {
		ocfs2_update_super_and_backups(inode, cmd, NULL);
		goto out_ip_unlock;
	}

	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		mlog_errno(ret);
		goto out_ip_unlock;
	}

	if (start + len > i_size_read(inode))
		i_size_write(inode, start + len);

	inode->i_mtime = inode->i_ctime = current_time(inode);
	ret = ocfs2_mark_inode_dirty(handle, inode, di_bh);
	ocfs2_commit_trans(osb, handle);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_ip_unlock;
	}

	journal = osb->journal->j_journal;
	ret = jbd2_journal_force_commit(journal);
	if (ret < 0)
		mlog_errno(ret);

out_ip_unlock:
	up_write(&OCFS2_I(inode)->ip_alloc_sem);
	brelse(di_bh);
	ocfs2_inode_unlock(inode, 1);

out_rw_unlock:
	ocfs2_rw_unlock(inode, 1);

out:
	inode_unlock(inode);
	return ret;
}

/*
 * Truncate a byte range, avoiding pages within partial clusters. This
 * preserves those pages for the zeroing code to write to.
 */
static void ocfs2_truncate_cluster_pages(struct inode *inode, u64 byte_start,
					 u64 byte_len)
{
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	loff_t start, end;
	struct address_space *mapping = inode->i_mapping;

	start = (loff_t)ocfs2_align_bytes_to_clusters(inode->i_sb, byte_start);
	end = byte_start + byte_len;
	end = end & ~(osb->s_clustersize - 1);

	if (start < end) {
		unmap_mapping_range(mapping, start, end - start, 0);
		truncate_inode_pages_range(mapping, start, end - 1);
	}
}

/*
 * zero out partial blocks of one cluster.
 *
 * start: file offset where zero starts, will be made upper block aligned.
 * len: it will be trimmed to the end of current cluster if "start + len"
 *      is bigger than it.
 */
static int ocfs2_zeroout_partial_cluster(struct inode *inode,
					u64 start, u64 len)
{
	int ret;
	u64 start_block, end_block, nr_blocks;
	u64 p_block, offset;
	u32 cluster, p_cluster, nr_clusters;
	struct super_block *sb = inode->i_sb;
	u64 end = ocfs2_align_bytes_to_clusters(sb, start);

	if (start + len < end)
		end = start + len;

	start_block = ocfs2_blocks_for_bytes(sb, start);
	end_block = ocfs2_blocks_for_bytes(sb, end);
	nr_blocks = end_block - start_block;
	if (!nr_blocks)
		return 0;

	cluster = ocfs2_bytes_to_clusters(sb, start);
	ret = ocfs2_get_clusters(inode, cluster, &p_cluster,
				&nr_clusters, NULL);
	if (ret)
		return ret;
	if (!p_cluster)
		return 0;

	offset = start_block - ocfs2_clusters_to_blocks(sb, cluster);
	p_block = ocfs2_clusters_to_blocks(sb, p_cluster) + offset;
	return sb_issue_zeroout(sb, p_block, nr_blocks, GFP_NOFS);
}

static int ocfs2_zero_partial_clusters(struct inode *inode,
				       u64 start, u64 len)
{
	int ret = 0;
	u64 tmpend = 0;
	u64 end = start + len;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	unsigned int csize = osb->s_clustersize;
	handle_t *handle;
	loff_t isize = i_size_read(inode);

	/*
	 * The "start" and "end" values are NOT necessarily part of
	 * the range whose allocation is being deleted. Rather, this
	 * is what the user passed in with the request. We must zero
	 * partial clusters here. There's no need to worry about
	 * physical allocation - the zeroing code knows to skip holes.
	 */
	trace_ocfs2_zero_partial_clusters(
		(unsigned long long)OCFS2_I(inode)->ip_blkno,
		(unsigned long long)start, (unsigned long long)end);

	/*
	 * If both edges are on a cluster boundary then there's no
	 * zeroing required as the region is part of the allocation to
	 * be truncated.
	 */
	if ((start & (csize - 1)) == 0 && (end & (csize - 1)) == 0)
		goto out;

	/* No page cache for EOF blocks, issue zero out to disk. */
	if (end > isize) {
		/*
		 * zeroout eof blocks in last cluster starting from
		 * "isize" even "start" > "isize" because it is
		 * complicated to zeroout just at "start" as "start"
		 * may be not aligned with block size, buffer write
		 * would be required to do that, but out of eof buffer
		 * write is not supported.
		 */
		ret = ocfs2_zeroout_partial_cluster(inode, isize,
					end - isize);
		if (ret) {
			mlog_errno(ret);
			goto out;
		}
		if (start >= isize)
			goto out;
		end = isize;
	}
	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		mlog_errno(ret);
		goto out;
	}

	/*
	 * If start is on a cluster boundary and end is somewhere in another
	 * cluster, we have not COWed the cluster starting at start, unless
	 * end is also within the same cluster. So, in this case, we skip this
	 * first call to ocfs2_zero_range_for_truncate() truncate and move on
	 * to the next one.
	 */
	if ((start & (csize - 1)) != 0) {
		/*
		 * We want to get the byte offset of the end of the 1st
		 * cluster.
		 */
		tmpend = (u64)osb->s_clustersize +
			(start & ~(osb->s_clustersize - 1));
		if (tmpend > end)
			tmpend = end;

		trace_ocfs2_zero_partial_clusters_range1(
			(unsigned long long)start,
			(unsigned long long)tmpend);

		ret = ocfs2_zero_range_for_truncate(inode, handle, start,
						    tmpend);
		if (ret)
			mlog_errno(ret);
	}

	if (tmpend < end) {
		/*
		 * This may make start and end equal, but the zeroing
		 * code will skip any work in that case so there's no
		 * need to catch it up here.
		 */
		start = end & ~(osb->s_clustersize - 1);

		trace_ocfs2_zero_partial_clusters_range2(
			(unsigned long long)start, (unsigned long long)end);

		ret = ocfs2_zero_range_for_truncate(inode, handle, start, end);
		if (ret)
			mlog_errno(ret);
	}
	ocfs2_update_inode_fsync_trans(handle, inode, 1);

	ocfs2_commit_trans(osb, handle);
out:
	return ret;
}

static int ocfs2_find_rec(struct ocfs2_extent_list *el, u32 pos)
{
	int i;
	struct ocfs2_extent_rec *rec = NULL;

	for (i = le16_to_cpu(el->l_next_free_rec) - 1; i >= 0; i--) {

		rec = &el->l_recs[i];

		if (le32_to_cpu(rec->e_cpos) < pos)
			break;
	}

	return i;
}

/*
 * Helper to calculate the punching pos and length in one run, we handle the
 * following three cases in order:
 *
 * - remove the entire record
 * - remove a partial record
 * - no record needs to be removed (hole-punching completed)
*/
static void ocfs2_calc_trunc_pos(struct inode *inode,
				 struct ocfs2_extent_list *el,
				 struct ocfs2_extent_rec *rec,
				 u32 trunc_start, u32 *trunc_cpos,
				 u32 *trunc_len, u32 *trunc_end,
				 u64 *blkno, int *done)
{
	int ret = 0;
	u32 coff, range;

	range = le32_to_cpu(rec->e_cpos) + ocfs2_rec_clusters(el, rec);

	if (le32_to_cpu(rec->e_cpos) >= trunc_start) {
		/*
		 * remove an entire extent record.
		 */
		*trunc_cpos = le32_to_cpu(rec->e_cpos);
		/*
		 * Skip holes if any.
		 */
		if (range < *trunc_end)
			*trunc_end = range;
		*trunc_len = *trunc_end - le32_to_cpu(rec->e_cpos);
		*blkno = le64_to_cpu(rec->e_blkno);
		*trunc_end = le32_to_cpu(rec->e_cpos);
	} else if (range > trunc_start) {
		/*
		 * remove a partial extent record, which means we're
		 * removing the last extent record.
		 */
		*trunc_cpos = trunc_start;
		/*
		 * skip hole if any.
		 */
		if (range < *trunc_end)
			*trunc_end = range;
		*trunc_len = *trunc_end - trunc_start;
		coff = trunc_start - le32_to_cpu(rec->e_cpos);
		*blkno = le64_to_cpu(rec->e_blkno) +
				ocfs2_clusters_to_blocks(inode->i_sb, coff);
		*trunc_end = trunc_start;
	} else {
		/*
		 * It may have two following possibilities:
		 *
		 * - last record has been removed
		 * - trunc_start was within a hole
		 *
		 * both two cases mean the completion of hole punching.
		 */
		ret = 1;
	}

	*done = ret;
}

int ocfs2_remove_inode_range(struct inode *inode,
			     struct buffer_head *di_bh, u64 byte_start,
			     u64 byte_len)
{
	int ret = 0, flags = 0, done = 0, i;
	u32 trunc_start, trunc_len, trunc_end, trunc_cpos, phys_cpos;
	u32 cluster_in_el;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct ocfs2_cached_dealloc_ctxt dealloc;
	struct address_space *mapping = inode->i_mapping;
	struct ocfs2_extent_tree et;
	struct ocfs2_path *path = NULL;
	struct ocfs2_extent_list *el = NULL;
	struct ocfs2_extent_rec *rec = NULL;
	struct ocfs2_dinode *di = (struct ocfs2_dinode *)di_bh->b_data;
	u64 blkno, refcount_loc = le64_to_cpu(di->i_refcount_loc);

	ocfs2_init_dinode_extent_tree(&et, INODE_CACHE(inode), di_bh);
	ocfs2_init_dealloc_ctxt(&dealloc);

	trace_ocfs2_remove_inode_range(
			(unsigned long long)OCFS2_I(inode)->ip_blkno,
			(unsigned long long)byte_start,
			(unsigned long long)byte_len);

	if (byte_len == 0)
		return 0;

	if (OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
		ret = ocfs2_truncate_inline(inode, di_bh, byte_start,
					    byte_start + byte_len, 0);
		if (ret) {
			mlog_errno(ret);
			goto out;
		}
		/*
		 * There's no need to get fancy with the page cache
		 * truncate of an inline-data inode. We're talking
		 * about less than a page here, which will be cached
		 * in the dinode buffer anyway.
		 */
		unmap_mapping_range(mapping, 0, 0, 0);
		truncate_inode_pages(mapping, 0);
		goto out;
	}

	/*
	 * For reflinks, we may need to CoW 2 clusters which might be
	 * partially zero'd later, if hole's start and end offset were
	 * within one cluster(means is not exactly aligned to clustersize).
	 */

	if (ocfs2_is_refcount_inode(inode)) {
		ret = ocfs2_cow_file_pos(inode, di_bh, byte_start);
		if (ret) {
			mlog_errno(ret);
			goto out;
		}

		ret = ocfs2_cow_file_pos(inode, di_bh, byte_start + byte_len);
		if (ret) {
			mlog_errno(ret);
			goto out;
		}
	}

	trunc_start = ocfs2_clusters_for_bytes(osb->sb, byte_start);
	trunc_end = (byte_start + byte_len) >> osb->s_clustersize_bits;
	cluster_in_el = trunc_end;

	ret = ocfs2_zero_partial_clusters(inode, byte_start, byte_len);
	if (ret) {
		mlog_errno(ret);
		goto out;
	}

	path = ocfs2_new_path_from_et(&et);
	if (!path) {
		ret = -ENOMEM;
		mlog_errno(ret);
		goto out;
	}

	while (trunc_end > trunc_start) {

		ret = ocfs2_find_path(INODE_CACHE(inode), path,
				      cluster_in_el);
		if (ret) {
			mlog_errno(ret);
			goto out;
		}

		el = path_leaf_el(path);

		i = ocfs2_find_rec(el, trunc_end);
		/*
		 * Need to go to previous extent block.
		 */
		if (i < 0) {
			if (path->p_tree_depth == 0)
				break;

			ret = ocfs2_find_cpos_for_left_leaf(&et,
							    path,
							    &cluster_in_el);
			if (ret) {
				mlog_errno(ret);
				goto out;
			}

			/*
			 * We've reached the leftmost extent block,
			 * it's safe to leave.
			 */
			if (cluster_in_el == 0)
				break;

			/*
			 * The 'pos' searched for previous extent block is
			 * always one cluster less than actual trunc_end.
			 */
			trunc_end = cluster_in_el + 1;

			ocfs2_reinit_path(path, 1);

			continue;

		} else
			rec = &el->l_recs[i];

		ocfs2_calc_trunc_pos(inode, el, rec, trunc_start, &trunc_cpos,
				     &trunc_len, &trunc_end, &blkno, &done);
		if (done)
			break;

		flags = rec->e_flags;
		phys_cpos = ocfs2_blocks_to_clusters(inode->i_sb, blkno);

		ret = ocfs2_remove_btree_range(inode, &et, trunc_cpos,
					       phys_cpos, trunc_len, flags,
					       &dealloc, refcount_loc, false);
		if (ret < 0) {
			mlog_errno(ret);
			goto out;
		}

		cluster_in_el = trunc_end;

		ocfs2_reinit_path(path, 1);
	}

	ocfs2_truncate_cluster_pages(inode, byte_start, byte_len);

out:
	ocfs2_free_path(path);
	ocfs2_schedule_flush_log(osb, 1);
	ocfs2_run_deallocs(osb, &dealloc);

	return ret;
}

/*
 * Parts of this function taken from xfs_change_file_space()
 */
static int __ocfs2_change_file_space(struct file *file, struct inode *inode,
				     loff_t f_pos, unsigned int cmd,
				     struct ocfs2_space_resv *sr,
				     int change_size)
{
	int ret;
	s64 llen;
	loff_t size, orig_isize;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct buffer_head *di_bh = NULL;
	handle_t *handle;
	unsigned long long max_off = inode->i_sb->s_maxbytes;

	if (ocfs2_is_hard_readonly(osb) || ocfs2_is_soft_readonly(osb))
		return -EROFS;

	inode_lock(inode);

	/* Wait all existing dio workers, newcomers will block on i_rwsem */
	inode_dio_wait(inode);
	/*
	 * This prevents concurrent writes on other nodes
	 */
	ret = ocfs2_rw_lock(inode, 1);
	if (ret) {
		mlog_errno(ret);
		goto out;
	}

	ret = ocfs2_inode_lock(inode, &di_bh, 1);
	if (ret) {
		mlog_errno(ret);
		goto out_rw_unlock;
	}

	if (inode->i_flags & (S_IMMUTABLE|S_APPEND)) {
		ret = -EPERM;
		goto out_inode_unlock;
	}

	switch (sr->l_whence) {
	case 0: /*SEEK_SET*/
		break;
	case 1: /*SEEK_CUR*/
		sr->l_start += f_pos;
		break;
	case 2: /*SEEK_END*/
		sr->l_start += i_size_read(inode);
		break;
	default:
		ret = -EINVAL;
		goto out_inode_unlock;
	}
	sr->l_whence = 0;

	llen = sr->l_len > 0 ? sr->l_len - 1 : sr->l_len;

	if (sr->l_start < 0
	    || sr->l_start > max_off
	    || (sr->l_start + llen) < 0
	    || (sr->l_start + llen) > max_off) {
		ret = -EINVAL;
		goto out_inode_unlock;
	}
	size = sr->l_start + sr->l_len;

	if (cmd == OCFS2_IOC_RESVSP || cmd == OCFS2_IOC_RESVSP64 ||
	    cmd == OCFS2_IOC_UNRESVSP || cmd == OCFS2_IOC_UNRESVSP64) {
		if (sr->l_len <= 0) {
			ret = -EINVAL;
			goto out_inode_unlock;
		}
	}

	if (file && setattr_should_drop_suidgid(file_inode(file))) {
		ret = __ocfs2_write_remove_suid(inode, di_bh);
		if (ret) {
			mlog_errno(ret);
			goto out_inode_unlock;
		}
	}

	down_write(&OCFS2_I(inode)->ip_alloc_sem);
	switch (cmd) {
	case OCFS2_IOC_RESVSP:
	case OCFS2_IOC_RESVSP64:
		/*
		 * This takes unsigned offsets, but the signed ones we
		 * pass have been checked against overflow above.
		 */
		ret = ocfs2_allocate_extents(inode, di_bh, sr->l_start,
						       sr->l_len, 1);
		break;
	case OCFS2_IOC_UNRESVSP:
	case OCFS2_IOC_UNRESVSP64:
		ret = ocfs2_remove_inode_range(inode, di_bh, sr->l_start,
					       sr->l_len);
		break;
	default:
		ret = -EINVAL;
	}

	orig_isize = i_size_read(inode);
	/* zeroout eof blocks in the cluster. */
	if (!ret && change_size && orig_isize < size) {
		ret = ocfs2_zeroout_partial_cluster(inode, orig_isize,
					size - orig_isize);
		if (!ret)
			i_size_write(inode, size);
	}

	if (ret) {
		mlog_errno(ret);
		goto out_up_write;
	}

	/*
	 * We update c/mtime for these changes
	 */
	handle = ocfs2_start_trans(osb, OCFS2_INODE_UPDATE_CREDITS);
	if (IS_ERR(handle)) {
		ret = PTR_ERR(handle);
		mlog_errno(ret);
		goto out_up_write;
	}

	inode->i_ctime = inode->i_mtime = current_time(inode);
	ret = ocfs2_mark_inode_dirty(handle, inode, di_bh);
	if (ret < 0)
		mlog_errno(ret);

	if (file && (file->f_flags & O_SYNC))
		handle->h_sync = 1;

	ocfs2_commit_trans(osb, handle);

out_up_write:
	up_write(&OCFS2_I(inode)->ip_alloc_sem);
out_inode_unlock:
	brelse(di_bh);
	ocfs2_inode_unlock(inode, 1);
out_rw_unlock:
	ocfs2_rw_unlock(inode, 1);

out:
	inode_unlock(inode);
	return ret;
}

int ocfs2_change_file_space(struct file *file, unsigned int cmd,
			    struct ocfs2_space_resv *sr)
{
	struct inode *inode = file_inode(file);
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	int ret;

	if ((cmd == OCFS2_IOC_RESVSP || cmd == OCFS2_IOC_RESVSP64) &&
	    !ocfs2_writes_unwritten_extents(osb))
		return -ENOTTY;
	else if ((cmd == OCFS2_IOC_UNRESVSP || cmd == OCFS2_IOC_UNRESVSP64) &&
		 !ocfs2_sparse_alloc(osb))
		return -ENOTTY;

	if (!S_ISREG(inode->i_mode))
		return -EINVAL;

	if (!(file->f_mode & FMODE_WRITE))
		return -EBADF;

	ret = mnt_want_write_file(file);
	if (ret)
		return ret;
	ret = __ocfs2_change_file_space(file, inode, file->f_pos, cmd, sr, 0);
	mnt_drop_write_file(file);
	return ret;
}

static long ocfs2_fallocate(struct file *file, int mode, loff_t offset,
			    loff_t len)
{
	struct inode *inode = file_inode(file);
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct ocfs2_space_resv sr;
	int change_size = 1;
	int cmd = OCFS2_IOC_RESVSP64;
	int ret = 0;

	if (mode & ~(FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE))
		return -EOPNOTSUPP;
	if (!ocfs2_writes_unwritten_extents(osb))
		return -EOPNOTSUPP;

	if (mode & FALLOC_FL_KEEP_SIZE) {
		change_size = 0;
	} else {
		ret = inode_newsize_ok(inode, offset + len);
		if (ret)
			return ret;
	}

	if (mode & FALLOC_FL_PUNCH_HOLE)
		cmd = OCFS2_IOC_UNRESVSP64;

	sr.l_whence = 0;
	sr.l_start = (s64)offset;
	sr.l_len = (s64)len;

	mlog(0, "%s: fallocate file %pd, inode %llu, pos %llu, len %llu.\n",
			osb->uuid_str, file->f_path.dentry,
			(unsigned long long)OCFS2_I(inode)->ip_blkno,
			(unsigned long long)offset, (unsigned long long)len);

	return __ocfs2_change_file_space(NULL, inode, offset, cmd, &sr,
					 change_size);
}

static int ocfs2_is_io_unaligned(struct inode *inode, size_t count, loff_t pos)
{
	int blockmask = inode->i_sb->s_blocksize - 1;
	loff_t final_size = pos + count;

	if ((pos & blockmask) || (final_size & blockmask))
		return 1;
	return 0;
}

int ocfs2_check_range_for_refcount(struct inode *inode, loff_t pos,
				   size_t count)
{
	int ret = 0;
	unsigned int extent_flags;
	u32 cpos, clusters, extent_len, phys_cpos;
	struct super_block *sb = inode->i_sb;

	if (!ocfs2_refcount_tree(OCFS2_SB(inode->i_sb)) ||
	    !ocfs2_is_refcount_inode(inode) ||
	    OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL)
		return 0;

	cpos = pos >> OCFS2_SB(sb)->s_clustersize_bits;
	clusters = ocfs2_clusters_for_bytes(sb, pos + count) - cpos;

	while (clusters) {
		ret = ocfs2_get_clusters(inode, cpos, &phys_cpos, &extent_len,
					 &extent_flags);
		if (ret < 0) {
			mlog_errno(ret);
			goto out;
		}

		if (phys_cpos && (extent_flags & OCFS2_EXT_REFCOUNTED)) {
			ret = 1;
			break;
		}

		if (extent_len > clusters)
			extent_len = clusters;

		clusters -= extent_len;
		cpos += extent_len;
	}
out:
	return ret;
}

static int ocfs2_prepare_inode_for_refcount(struct inode *inode,
					    struct file *file,
					    loff_t pos, size_t count,
					    int *meta_level)
{
	int ret;
	struct buffer_head *di_bh = NULL;
	u32 cpos = pos >> OCFS2_SB(inode->i_sb)->s_clustersize_bits;
	u32 clusters =
		ocfs2_clusters_for_bytes(inode->i_sb, pos + count) - cpos;

	ret = ocfs2_inode_lock_full(inode, &di_bh,
			1, OCFS2_LOCK_DLM_ONLY);
	if (ret) {
		mlog_errno(ret);
		goto out;
	}

	*meta_level = 1;

	ret = ocfs2_refcount_cow(inode, di_bh, cpos, clusters, UINT_MAX);
	if (ret)
		mlog_errno(ret);
out:
	brelse(di_bh);
	return ret;
}

static int ocfs2_prepare_inode_for_write(struct file *file,
					 loff_t pos,
					 size_t count,
					 int appending,
					 int *direct_io)
{
	int ret = 0, meta_level = 0;
	struct dentry *dentry = file->f_path.dentry;
	struct inode *inode = d_inode(dentry);
	loff_t end;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);

	/*
	 * We start with a read level meta lock and only jump to an ex
	 * if we need to make modifications here.
	 */
	for(;;) {
		ret = ocfs2_inode_lock_full(inode, NULL,
				meta_level, OCFS2_LOCK_DLM_ONLY);
		if (ret < 0) {
			meta_level = -1;
			mlog_errno(ret);
			goto out;
		}

		/* Clear suid / sgid if necessary. We do this here
		 * instead of later in the write path because
		 * remove_suid() calls ->setattr without any hint that
		 * we may have already done our cluster locking. Since
		 * ocfs2_setattr() *must* take cluster locks to
		 * proceed, this will lead us to recursively lock the
		 * inode. There's also the dinode i_size state which
		 * can be lost via setattr during extending writes (we
		 * set inode->i_size at the end of a write. */
		if (setattr_should_drop_suidgid(inode)) {
			if (meta_level == 0) {
				ocfs2_inode_unlock_full(inode,
						meta_level, OCFS2_LOCK_DLM_ONLY);
				meta_level = 1;
				continue;
			}

			ret = ocfs2_write_remove_suid(inode);
			if (ret < 0) {
				mlog_errno(ret);
				goto out_unlock;
			}
		}

		end = pos + count;

		ret = ocfs2_check_range_for_refcount(inode, pos, count);
		if (ret == 1) {
			ocfs2_inode_unlock_full(inode, meta_level,
					OCFS2_LOCK_DLM_ONLY);
			meta_level = -1;

			ret = ocfs2_prepare_inode_for_refcount(inode,
							       file,
							       pos,
							       count,
							       &meta_level);
			if (direct_io)
				*direct_io = 0;
		}

		if (ret < 0) {
			mlog_errno(ret);
			goto out_unlock;
		}

		/*
		 * Skip the O_DIRECT checks if we don't need
		 * them.
		 */
		if (!direct_io || !(*direct_io))
			break;

		/*
		 * There's no sane way to do direct writes to an inode
		 * with inline data.
		 */
		if (OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
			*direct_io = 0;
			break;
		}

		/* skip the O_DIRECT checks if the feature bit is set */
		if (ocfs2_supports_high_perf_dio(osb))
			break;

		/*
		 * Fallback to old way if it is append dio.
		 */
		if (end > i_size_read(inode)) {
			*direct_io = 0;
			break;
		}

		/*
		 * We don't fill holes during direct io, so
		 * check for them here. If any are found, the
		 * caller will have to retake some cluster
		 * locks and initiate the io as buffered.
		 */
		ret = ocfs2_check_range_for_holes(inode, pos, count);
		if (ret == 1) {
			*direct_io = 0;
			ret = 0;
		} else if (ret < 0) {
			mlog_errno(ret);
		}
		break;
	}

out_unlock:
	trace_ocfs2_prepare_inode_for_write(OCFS2_I(inode)->ip_blkno,
					    pos, appending, count, direct_io);

	if (meta_level >= 0)
		ocfs2_inode_unlock_full(inode, meta_level,
			OCFS2_LOCK_DLM_ONLY);

out:
	return ret;
}

static void ocfs2_unwritten_wait(struct inode *inode)
{
	wait_queue_head_t *wq = ocfs2_ioend_wq(inode);

	wait_event(*wq, (atomic_read(&OCFS2_I(inode)->ip_unwritten) == 0));
}

static ssize_t ocfs2_file_write_iter(struct kiocb *iocb,
				    struct iov_iter *from)
{
	int direct_io, appending, rw_level;
	int can_do_direct;
	ssize_t written = 0;
	ssize_t ret;
	size_t count = iov_iter_count(from), orig_count;
	struct file *file = iocb->ki_filp;
	struct inode *inode = file_inode(file);
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	int full_coherency = !(osb->s_mount_opt &
			       OCFS2_MOUNT_COHERENCY_BUFFERED);
	int unaligned_dio = 0;
	int dropped_dio = 0;
	int append_write = ((iocb->ki_pos + count) >= i_size_read(inode) ? 1 : 0);
	int lock_level = -1, disk_lock_level;
	int had_lock = -1;
	struct ocfs2_lock_holder *oh;
	struct buffer_head *di_bh = NULL;

	trace_ocfs2_file_write_iter(inode, file, file->f_path.dentry,
		(unsigned long long)OCFS2_I(inode)->ip_blkno,
		file->f_path.dentry->d_name.len,
		file->f_path.dentry->d_name.name,
		(unsigned int)from->nr_segs);	/* GRRRRR */
	mlog(ML_DEBUG, "%s: write inode %lu, file %pd, "
			"nr_segs %llu, pos %llu\n", osb->uuid_str,
			inode->i_ino, file->f_path.dentry,
			(unsigned long long)from->nr_segs, iocb->ki_pos);

	/* do not allow to write file in case of online recovery */
	if (ocfs2_test_repairing_fs(osb)) {
		mlog(ML_ERROR, "%s: OCFS2 is in online recovery.\n", osb->uuid_str);
		return -EIO;
	}

	if (ocfs2_test_invalid_fs(osb)) {
		printk_once(KERN_ERR "ocfs2_file_write_iter: %s: OCFS2 invalid.\n",
				osb->uuid_str);
		return -EIO;
	}

	if (count == 0)
		return 0;

	appending = iocb->ki_flags & IOCB_APPEND ? 1 : 0;
	direct_io = iocb->ki_flags & IOCB_DIRECT ? 1 : 0;

	inode_lock(inode);

relock:
	/*
	 * Concurrent O_DIRECT writes are allowed with
	 * mount_option "coherency=buffered".
	 * For append write, we must take rw EX.
	 */
	rw_level = (!direct_io || full_coherency || append_write);

	ret = ocfs2_rw_lock(inode, rw_level);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_mutex;
	}

	disk_lock_level = !(OCFS2_I(inode)->ip_shared_vol);
	had_lock = ocfs2_inode_lock_tracker_full(inode, &di_bh, disk_lock_level, &oh,
			OCFS2_LOCK_DISK_ONLY);
	if (had_lock < 0) {
		ret = had_lock;
		mlog(ML_ERROR, "inode lock failed, ino = %lu, "
				"ret = %zd\n", inode->i_ino, ret);
		goto out;
	} else if (had_lock > 0) {
		mlog(ML_ERROR, "Another case of recursive locking:\n");
		dump_stack();
		ret = -EINVAL;
		goto out;
	}

	lock_level = disk_lock_level;
	ocfs2_iocb_set_inode_locked(iocb, lock_level);
	if (ocfs2_disk_lock(osb) &&
			!ocfs2_check_inode_permission(inode)) {
		ret = -EACCES;
		goto out;
	}

	if (ocfs2_check_inode_ro_flag(osb, di_bh) == 1) {
		ret = -EIO;
		mlog_errno(ret);
		goto out;
	}

	/*
	 * O_DIRECT writes with "coherency=full" need to take EX cluster
	 * inode_lock to guarantee coherency.
	 */
	if (direct_io && full_coherency) {
		/*
		 * We need to take and drop the inode lock to force
		 * other nodes to drop their caches.  Buffered I/O
		 * already does this in write_begin().
		 */
		ret = ocfs2_inode_lock_full(inode, NULL,
				1, OCFS2_LOCK_DLM_ONLY);
		if (ret < 0) {
			mlog_errno(ret);
			goto out;
		}

		if (!ocfs2_disk_lock(osb) &&
				!ocfs2_check_inode_permission(inode)) {
			ret = -EACCES;
			ocfs2_inode_unlock_full(inode, 1, OCFS2_LOCK_DLM_ONLY);
			goto out;
		}

		ocfs2_inode_unlock_full(inode, 1, OCFS2_LOCK_DLM_ONLY);
	}

	orig_count = iov_iter_count(from);
	ret = generic_write_checks(iocb, from);
	if (ret <= 0) {
		if (ret)
			mlog_errno(ret);
		goto out;
	}
	count = ret;

	can_do_direct = direct_io;
	ret = ocfs2_prepare_inode_for_write(file, iocb->ki_pos,
					    count, appending,
					    &can_do_direct);
	if (ret < 0) {
		mlog_errno(ret);
		goto out;
	}

	/*
	 * We can't complete the direct I/O as requested, fall back to
	 * buffered I/O.
	 */
	if (direct_io && !can_do_direct) {
		ocfs2_iocb_clear_inode_locked(iocb);
		ocfs2_inode_unlock_tracker_full(inode, lock_level, &oh, had_lock,
				OCFS2_LOCK_DISK_ONLY);
		lock_level = -1;
		had_lock = -1;
		if (di_bh) {
			brelse(di_bh);
			di_bh = NULL;
		}

		ocfs2_rw_unlock(inode, rw_level);

		direct_io = 0;
		iocb->ki_flags &= ~IOCB_DIRECT;
		iov_iter_reexpand(from, orig_count);
		dropped_dio = 1;
		goto relock;
	}

	if (can_do_direct && !is_sync_kiocb(iocb))
		unaligned_dio = ocfs2_is_io_unaligned(inode, count, iocb->ki_pos);

	if (unaligned_dio)
		ocfs2_unwritten_wait(inode);

	/* communicate with ocfs2_dio_end_io */
	ocfs2_iocb_set_rw_locked(iocb, rw_level);

	written = __generic_file_write_iter(iocb, from);
	/* buffered aio wouldn't have proper lock coverage today */
	BUG_ON(written == -EIOCBQUEUED && !(iocb->ki_flags & IOCB_DIRECT));

	/*
	 * deep in g_f_a_w_n()->ocfs2_direct_IO we pass in a ocfs2_dio_end_io
	 * function pointer which is called when o_direct io completes so that
	 * it can unlock our rw lock.  (it's the clustered equivalent of
	 * i_alloc_sem; protects truncate from racing with pending ios).
	 * Unfortunately there are error cases which call end_io and others
	 * that don't.  so we don't have to unlock the rw_lock if either an
	 * async dio is going to do it in the future or an end_io after an
	 * error has already done it.
	 */
	if ((written == -EIOCBQUEUED) || (!ocfs2_iocb_is_rw_locked(iocb)))
		rw_level = -1;

	if ((written == -EIOCBQUEUED) || (!ocfs2_iocb_is_inode_locked(iocb)))
		lock_level = -1;

	if (unlikely(written <= 0))
		goto out;

	if (((file->f_flags & O_DSYNC) && !direct_io) ||
	    IS_SYNC(inode) || dropped_dio) {
		ret = filemap_fdatawrite_range(file->f_mapping,
					       iocb->ki_pos - written,
					       iocb->ki_pos - 1);
		if (ret < 0)
			written = ret;

		if (!ret) {
			ret = jbd2_journal_force_commit(osb->journal->j_journal);
			if (ret < 0)
				written = ret;
		}

		if (!ret)
			ret = filemap_fdatawait_range(file->f_mapping,
						      iocb->ki_pos - written,
						      iocb->ki_pos - 1);
	}

	if (di_bh && !had_lock) {
		brelse(di_bh);
		di_bh = NULL;
	}

out:
	if (lock_level != -1)
		ocfs2_inode_unlock_tracker_full(inode, lock_level, &oh,
				had_lock, OCFS2_LOCK_DISK_ONLY);
	else
		ocfs2_remove_holder(inode, &oh, had_lock);

	if (rw_level != -1)
		ocfs2_rw_unlock(inode, rw_level);

out_mutex:
	inode_unlock(inode);

	if (written)
		ret = written;
	return ret;
}

static ssize_t ocfs2_file_read_iter(struct kiocb *iocb,
				   struct iov_iter *to)
{
	int ret = 0, rw_level = -1, lock_level = 0;
	struct file *filp = iocb->ki_filp;
	struct inode *inode = file_inode(filp);
	struct ocfs2_super *osb;

	trace_ocfs2_file_read_iter(inode, filp, filp->f_path.dentry,
			(unsigned long long)OCFS2_I(inode)->ip_blkno,
			filp->f_path.dentry->d_name.len,
			filp->f_path.dentry->d_name.name,
			to->nr_segs);	/* GRRRRR */

	if (!inode) {
		ret = -EINVAL;
		mlog_errno(ret);
		goto bail;
	}
	osb = OCFS2_SB(inode->i_sb);

	mlog(ML_DEBUG, "%s: read inode %lu, file %pd, "
			"nr_segs %llu, pos %llu\n", osb->uuid_str,
			inode->i_ino, filp->f_path.dentry,
			(unsigned long long)to->nr_segs, iocb->ki_pos);

	/* do not allow to read in case of online recovery */
	if (ocfs2_test_repairing_fs(osb)) {
		mlog(ML_ERROR, "%s: OCFS2 is in online recovery.\n", osb->uuid_str);
		return -EIO;
	}

	if (ocfs2_test_invalid_fs(osb))
		return -EIO;

	if (ocfs2_inode_lock_and_check_ro_flag(inode) != 0) {
		ret = -EIO;
		mlog_errno(ret);
		return ret;
	};

	/*
	 * buffered reads protect themselves in ->readpage().  O_DIRECT reads
	 * need locks to protect pending reads from racing with truncate.
	 */
	if (iocb->ki_flags & IOCB_DIRECT) {
		ret = ocfs2_rw_lock(inode, 0);
		if (ret < 0) {
			mlog_errno(ret);
			goto bail;
		}
		rw_level = 0;
		/* communicate with ocfs2_dio_end_io */
		ocfs2_iocb_set_rw_locked(iocb, rw_level);
	}

	if (ocfs2_disk_lock(osb) &&
			OCFS2_I(inode)->ip_shared_vol) {
		ret = ocfs2_inode_lock(inode, NULL, 0);
		if (ret < 0) {
			mlog_errno(ret);
			goto bail;
		}

		lock_level = 0;
	} else {
		/*
		 * We're fine letting folks race truncates and extending
		 * writes with read across the cluster, just like they can
		 * locally. Hence no rw_lock during read.
		 *
		 * Take and drop the meta data lock to update inode fields
		 * like i_size. This allows the checks down below
		 * generic_file_read_iter() a chance of actually working.
		 */
		ret = ocfs2_inode_lock_atime(inode, filp->f_path.mnt, &lock_level);
		if (ret < 0) {
			mlog_errno(ret);
			goto bail;
		}
	}

	ocfs2_inode_unlock(inode, lock_level);

	ret = generic_file_read_iter(iocb, to);
	trace_generic_file_read_iter_ret(ret);

	/* buffered aio wouldn't have proper lock coverage today */
	BUG_ON(ret == -EIOCBQUEUED && !(iocb->ki_flags & IOCB_DIRECT));

	/* see ocfs2_file_write_iter */
	if (ret == -EIOCBQUEUED || !ocfs2_iocb_is_rw_locked(iocb))
		rw_level = -1;

bail:
	if (rw_level != -1)
		ocfs2_rw_unlock(inode, rw_level);

	return ret;
}

/* Refer generic_file_llseek_unlocked() */
static loff_t ocfs2_file_llseek(struct file *file, loff_t offset, int whence)
{
	struct inode *inode = file->f_mapping->host;
	int ret = 0;

	inode_lock(inode);

	switch (whence) {
	case SEEK_SET:
		break;
	case SEEK_END:
		/*
		 * We need to take and drop the inode lock to force
		 * other nodes to drop their caches.
		 */
		ret = ocfs2_inode_lock(inode, NULL, 0);
		if (ret < 0)
			goto out;
		offset += i_size_read(inode);
		ocfs2_inode_unlock(inode, 0);
		break;
	case SEEK_CUR:
		if (offset == 0) {
			offset = file->f_pos;
			goto out;
		}
		offset += file->f_pos;
		break;
	/*
	case SEEK_DATA:
	case SEEK_HOLE:
		ret = ocfs2_seek_data_hole_offset(file, &offset, whence);
		if (ret)
			goto out;
		break;
	*/
	default:
		ret = -EINVAL;
		goto out;
	}

	offset = vfs_setpos(file, offset, inode->i_sb->s_maxbytes);

out:
	inode_unlock(inode);
	if (ret)
		return ret;
	return offset;
}

static loff_t ocfs2_remap_file_range(struct file *file_in, loff_t pos_in,
				     struct file *file_out, loff_t pos_out,
				     loff_t len, unsigned int remap_flags)
{
	struct inode *inode_in = file_inode(file_in);
	struct inode *inode_out = file_inode(file_out);
	struct ocfs2_super *osb = OCFS2_SB(inode_in->i_sb);
	struct buffer_head *in_bh = NULL, *out_bh = NULL;
	bool same_inode = (inode_in == inode_out);
	loff_t remapped = 0;
	ssize_t ret;

	if (remap_flags & ~(REMAP_FILE_DEDUP | REMAP_FILE_ADVISORY))
		return -EINVAL;
	if (!ocfs2_refcount_tree(osb))
		return -EOPNOTSUPP;
	if (ocfs2_is_hard_readonly(osb) || ocfs2_is_soft_readonly(osb))
		return -EROFS;

	/* Lock both files against IO */
	ret = ocfs2_reflink_inodes_lock(inode_in, &in_bh, inode_out, &out_bh);
	if (ret)
		return ret;

	/* Check file eligibility and prepare for block sharing. */
	ret = -EINVAL;
	if ((OCFS2_I(inode_in)->ip_flags & OCFS2_INODE_SYSTEM_FILE) ||
	    (OCFS2_I(inode_out)->ip_flags & OCFS2_INODE_SYSTEM_FILE))
		goto out_unlock;

	ret = generic_remap_file_range_prep(file_in, pos_in, file_out, pos_out,
			&len, remap_flags);
	if (ret < 0 || len == 0)
		goto out_unlock;

	/* Lock out changes to the allocation maps and remap. */
	down_write(&OCFS2_I(inode_in)->ip_alloc_sem);
	if (!same_inode)
		down_write_nested(&OCFS2_I(inode_out)->ip_alloc_sem,
				  SINGLE_DEPTH_NESTING);

	/* Zap any page cache for the destination file's range. */
	truncate_inode_pages_range(&inode_out->i_data,
				   round_down(pos_out, PAGE_SIZE),
				   round_up(pos_out + len, PAGE_SIZE) - 1);

	remapped = ocfs2_reflink_remap_blocks(inode_in, in_bh, pos_in,
			inode_out, out_bh, pos_out, len);
	up_write(&OCFS2_I(inode_in)->ip_alloc_sem);
	if (!same_inode)
		up_write(&OCFS2_I(inode_out)->ip_alloc_sem);
	if (remapped < 0) {
		ret = remapped;
		mlog_errno(ret);
		goto out_unlock;
	}

	/*
	 * Empty the extent map so that we may get the right extent
	 * record from the disk.
	 */
	ocfs2_extent_map_trunc(inode_in, 0);
	ocfs2_extent_map_trunc(inode_out, 0);

	ret = ocfs2_reflink_update_dest(inode_out, out_bh, pos_out + len);
	if (ret) {
		mlog_errno(ret);
		goto out_unlock;
	}

out_unlock:
	ocfs2_reflink_inodes_unlock(inode_in, in_bh, inode_out, out_bh);
	return remapped > 0 ? remapped : ret;
}

static int ocfs2_check_xcopy_support(struct file *src_file, loff_t off, size_t len)
{
	struct inode *inode = d_inode(src_file->f_path.dentry);
	struct ocfs2_super *osb = NULL;
	int xcopy_switch = 0;

	if (inode->i_sb->s_magic != OCFS2_SUPER_MAGIC) {
		mlog(ML_ERROR, "magic error\n");
		return -EINVAL;
	}

	osb = OCFS2_SB(inode->i_sb);
	if (ocfs2_test_invalid_fs(osb)) {
		mlog(ML_ERROR, "%s: OCFS2 invalid because of disk timeout.\n", osb->uuid_str);
		return -EIO;
	}

	if (ocfs2_is_hard_readonly(osb) || ocfs2_is_soft_readonly(osb)) {
		mlog_errno(-EROFS);
		return -EROFS;
	}

	xcopy_switch = ocfs2_get_vaai_switch_state_nolock(osb, OCFS2_XCOPY_STATE);
	if (xcopy_switch < 0) {
		mlog_errno(xcopy_switch);
		return xcopy_switch;
	}

	spin_lock(&osb->osb_lock);
	if (!xcopy_switch || !osb->osb_xcopy_support) {
		spin_unlock(&osb->osb_lock);
		mlog(ML_ERROR, "%s Xcopy is disabled!\n", osb->uuid_str);
		return -EOPNOTSUPP;
	}
	spin_unlock(&osb->osb_lock);

	if ((off & 0xFFFF)) {
		mlog(ML_ERROR, "%s: start are not a multiple of 64KB, start = %llu.\n",
			 osb->uuid_str, off);
		return -EINVAL;
	}

	if ((osb->s_clustersize & 0xFFFF) || osb->s_clustersize < MIN_XCOPY_BYTES) {
		mlog(ML_ERROR, "%s: scluster size are not a multiple of 64KB, cluster_size = %d.\n",
				osb->uuid_str, osb->s_clustersize);
		return -EOPNOTSUPP;
	}

	return 0;
}

static void ocfs2_fill_xcopy_dest_extent(struct ocfs2_super *osb,
		struct ocfs2_device_extent_info *dev_extent_info,
		struct ocfs2_device_extent_rec *dev_extent,
		struct dev_segment *scsi_dev_seg)
{
	struct ocfs2_device_extent_rec *cfr_dest_extent = dev_extent_info->ei_cfr_extents_start;

	memcpy(dev_extent->disk_name, scsi_dev_seg->disk_name, sizeof(scsi_dev_seg->disk_name));
	cfr_dest_extent = dev_extent_info->ei_cfr_extents_start +
					  dev_extent_info->ei_mapped_extents;
	memcpy(cfr_dest_extent, dev_extent, sizeof(struct ocfs2_device_extent_rec));

	dev_extent_info->ei_mapped_extents++;
}

static int ocfs2_get_bdev_and_lookup_naa(struct ocfs2_super *osb, struct dev_segment *scsi_dev_seg)
{
	int ret = 0;
	struct block_device *bdev = NULL;

	if (scsi_dev_seg == NULL) {
		mlog(ML_ERROR, "%s: scsi_dev_seg == NULL.\n", osb->uuid_str);
		return -ENOMEM;
	}

	bdev = ocfs2_bdget(scsi_dev_seg->dvd);
	if (!bdev) {
		mlog(ML_ERROR, "%s: get bdev failed.\n", osb->uuid_str);
		return -ENOMEM;
	}

	ret = ocfs2_lookup_naa(scsi_dev_seg->disk_name, bdev);
	ocfs2_bdput(bdev);
	if (ret < 0)
		mlog_errno(ret);

	return ret;
}

static int ocfs2_xcopy_list_entry_for_fill_extent(struct inode *inode,
		struct ocfs2_device_extent_info *dev_extent_info,
		struct ocfs2_extent_rec *rec, struct ocfs2_query_info *oqi,
		struct list_head *dev_list)
{
	int ret = 0;
	u64 last_seg_len = 0;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct ocfs2_device_extent_rec dev_extent;
	struct dev_segment *dev_seg = NULL;
	struct dev_segment *scsi_dev_seg = NULL;
	struct list_head scsi_dev_list;

	/* one VIMS volume include several device segment, one device segment
		* is a series of physical blocks. */
	list_for_each_entry(dev_seg, dev_list, list) {
		oqi->query_fs_phys_start -= last_seg_len;
		last_seg_len = dev_seg->len;

		/* query phy offset is not in current segment */
		if (dev_seg->len <= oqi->query_fs_phys_start)
			continue;

		if (dev_extent_info->ei_mapped_extents == dev_extent_info->ei_extent_count) {
			mlog(ML_ERROR, "%s: excceed max numbers(%u).\n",
				 osb->uuid_str, dev_extent_info->ei_extent_count);
			ret = -EINVAL;
			break;
		}

		ret = ocfs2_get_scsi_dev_seg(dev_seg, &scsi_dev_list, &scsi_dev_seg);
		if (ret)
			break;

		memset(&dev_extent, 0, sizeof(dev_extent));
		dev_extent.phy_offset = dev_seg->start + oqi->query_fs_phys_start;
		dev_extent.length = min((dev_seg->len - oqi->query_fs_phys_start), oqi->query_len);
		dev_extent.pos = oqi->query_fs_virt_start;
		dev_extent.dvd = dev_seg->dvd;
		if (rec->e_flags & OCFS2_EXT_UNWRITTEN)
			dev_extent.flag = OCFS2_XCOPY_EXTENT_UNWRITTEN;

		ret = ocfs2_get_bdev_and_lookup_naa(osb, scsi_dev_seg);
		if (ret) {
			if (scsi_dev_seg != dev_seg)
				o2hb_free_device_list(&scsi_dev_list);
			break;
		}

		mlog(ML_DEBUG, "%s: phy_offset(%llu), start off(%llu), len(%llu).\n",
				osb->uuid_str, dev_extent.phy_offset,
				dev_extent.pos, dev_extent.length);
		ocfs2_fill_xcopy_dest_extent(osb, dev_extent_info, &dev_extent, scsi_dev_seg);
		if (scsi_dev_seg != dev_seg)
			o2hb_free_device_list(&scsi_dev_list);

		oqi->query_fs_virt_start += dev_extent.length;
		oqi->query_fs_phys_start += dev_extent.length;
		oqi->query_len -= dev_extent.length;
		if (!oqi->query_len)
			break;
	}

	return ret;
}

static int ocfs2_get_block_and_extent(struct inode *inode,
		struct buffer_head *di_bh, u64 start, u64 len,
		struct ocfs2_device_extent_info *dev_extent_info,
		struct list_head *dev_list)
{
	int ret = 0, is_last = 0;
	unsigned int hole_size;
	struct ocfs2_extent_rec rec;
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	u64 hole_bytes, len_bytes, phys_bytes, virt_bytes;
	u64 query_fs_phys_start, query_fs_virt_start, query_len, tmp_start = start, tmp_len = len;
	u32 cpos = tmp_start >> osb->s_clustersize_bits;
	u32 mapping_end = ocfs2_clusters_for_bytes(inode->i_sb, tmp_start + tmp_len);
	struct ocfs2_query_info oqi = {0};

	while (cpos < mapping_end && !is_last) {
		ret = ocfs2_get_clusters_nocache(inode, di_bh, cpos,
				&hole_size, &rec, &is_last);
		if (ret < 0) {
			mlog_errno(ret);
			goto out;
		}

		if (rec.e_blkno == 0ULL) {
			hole_bytes = min((u64)(hole_size) << osb->s_clustersize_bits, tmp_len);
			ret = ocfs2_add_hole_extent(dev_extent_info, hole_bytes, tmp_start);
			if (ret < 0) {
				mlog_errno(ret);
				goto out;
			}
			cpos += hole_size;
			tmp_start += hole_bytes;
			tmp_len -= hole_bytes;
			continue;
		}

		len_bytes = (u64)le16_to_cpu(rec.e_leaf_clusters) << osb->s_clustersize_bits;
		phys_bytes = le64_to_cpu(rec.e_blkno) << osb->sb->s_blocksize_bits;
		virt_bytes = (u64)le32_to_cpu(rec.e_cpos) << osb->s_clustersize_bits;

		/* virtual device offset */
		query_fs_virt_start = tmp_start;
		query_fs_phys_start = phys_bytes + tmp_start - virt_bytes;
		query_len = min((virt_bytes + len_bytes - tmp_start), tmp_len);

		tmp_start += query_len;
		tmp_len -= query_len;

		oqi.query_fs_virt_start = query_fs_virt_start;
		oqi.query_fs_phys_start = query_fs_phys_start;
		oqi.query_len = query_len;

		ret = ocfs2_xcopy_list_entry_for_fill_extent(
				inode, dev_extent_info, &rec, &oqi, dev_list);
		if (ret < 0)
			goto out;

		cpos = le32_to_cpu(rec.e_cpos) + le16_to_cpu(rec.e_leaf_clusters);
	}

out:
	return ret;
}

static int ocfs2_cfr_query_device_addr(struct file *filp, u64 start, u64 len,
		struct ocfs2_device_extent_info *dev_extent_info)
{
	int ret = 0;
	struct inode *inode = d_inode(filp->f_path.dentry);
	struct ocfs2_super *osb = OCFS2_SB(inode->i_sb);
	struct buffer_head *di_bh = NULL;
	struct list_head dev_list;

	if (ocfs2_test_invalid_fs(osb)) {
		mlog(ML_ERROR, "%s Xcopy: OCFS2 invalid because of disk timeout.\n", osb->uuid_str);
		return -EIO;
	}

	INIT_LIST_HEAD(&dev_list);
	ret = dm_get_device_segment(inode->i_sb->s_bdev->bd_dev, &dev_list);
	if (ret == -ENOENT) {
		/* ocfs2 volume not a dm device */
		ret = o2hb_get_dev_segment(osb->sb->s_bdev, &dev_list);
	}

	if (ret < 0) {
		mlog(ML_ERROR, "%s: get dev segment failed, err: %d.\n", osb->uuid_str, ret);
		goto out;
	}

	if (list_empty(&dev_list)) {
		mlog(ML_ERROR, "%s: dev segment is NULL.\n", osb->uuid_str);
		ret = -EINVAL;
		goto out;
	}

	ret = ocfs2_inode_lock(inode, &di_bh, 0);
	if (ret < 0) {
		mlog_errno(ret);
		goto out;
	}

	down_read(&OCFS2_I(inode)->ip_alloc_sem);

	if (OCFS2_I(inode)->ip_dyn_features & OCFS2_INLINE_DATA_FL) {
		mlog(ML_ERROR, "%s: Do not support inline data.\n", osb->uuid_str);
		ret = -EINVAL;
		goto out_unlock;
	}

    /* Ensure file data in page_cache flush into disk */
	ret = file_write_and_wait_range(filp, start, start + len - 1);
	if (ret < 0) {
		mlog_errno(ret);
		goto out_unlock;
	}

	ret = ocfs2_get_block_and_extent(inode, di_bh, start, len, dev_extent_info, &dev_list);

out_unlock:
	brelse(di_bh);
	up_read(&OCFS2_I(inode)->ip_alloc_sem);
	ocfs2_inode_unlock(inode, 0);

out:
	o2hb_free_device_list(&dev_list);
	return ret;
}

static ssize_t ocfs2_xcopy_read(struct file *src_file, size_t start, size_t copy_len,
		struct ocfs2_device_extent_info *dev_extent_info,
		struct ocfs2_device_extent_list *dev_extent_list)
{
	ssize_t status = 0;

	dev_extent_list->start = start;
	dev_extent_list->len = copy_len;

	dev_extent_info->ei_extent_count = dev_extent_list->max_extent_count;
	dev_extent_info->ei_cfr_extents_start = dev_extent_list->extent;
	dev_extent_info->is_cfr = 1;
	dev_extent_info->ei_extents_start = NULL;

	status = ocfs2_cfr_query_device_addr(
			src_file, dev_extent_list->start,
			dev_extent_list->len, dev_extent_info);
	if (status < 0) {
		mlog(ML_ERROR, "%s: xcopy read error: start(%zu) copy_len(%zu), status(%zd)\n",
				OCFS2_SB((d_inode(src_file->f_path.dentry))->i_sb)->uuid_str,
				start, copy_len, status);
		return status;
	}

	dev_extent_list->mapped_extents = dev_extent_info->ei_mapped_extents;

	return status;
}

static ssize_t ocfs2_xcopy_write(struct file *dst_file, size_t dest_start, size_t copy_len,
		struct ocfs2_device_extent_info *dev_extent_info,
		struct ocfs2_device_extent_list *dev_extent_list)
{
	ssize_t status = 0;

	dev_extent_list->start = dest_start;
	dev_extent_list->len = copy_len;

	if (dev_extent_list->max_extent_count > OCFS2_XCOPY_MAX_EXTENTS)
		return -ENOMEM;

	dev_extent_info->ei_mapped_extents = dev_extent_list->mapped_extents;
	dev_extent_info->ei_extents_start = dev_extent_list->extent;

	status = ocfs2_extended_copy(dst_file,
			dev_extent_list->start,
			dev_extent_list->len, dev_extent_info);
	if (status < 0) {
		mlog(ML_ERROR, "%s: xcopy write error: start(%zu) copy_len(%zu), status(%zd)\n",
				OCFS2_SB((d_inode(dst_file->f_path.dentry))->i_sb)->uuid_str,
				dest_start, copy_len, status);
	}

	return status;
}

static void ocfs2_try_to_generic_copy(struct file *src_file, loff_t start,
		struct file *dst_file, loff_t dest_start,
		size_t size, unsigned int flags, u64 *ret_len)
{
	struct ocfs2_super *src_osb = OCFS2_SB((d_inode(src_file->f_path.dentry))->i_sb);
	u64 tmp_len = *ret_len;
	ssize_t status = 0;

	if (size != 0 && size < MIN_XCOPY_BYTES) {
		status = generic_copy_file_range(
				src_file, start, dst_file, dest_start, size, flags);
		mlog(ML_NOTICE, "%s: try to use splice: start(%llu) len(%zu), status(%zd)\n",
				src_osb->uuid_str, start, size, status);
		if (status >= 0) {
			tmp_len += status;
		} else {
			mlog(ML_ERROR, "%s: splice error: start(%llu) len(%zu), status(%zd)\n",
					src_osb->uuid_str, start, size, status);
		}

		*ret_len = tmp_len;
	}
}

static ssize_t ocfs2_xcopy_file_range(struct file *src_file, loff_t off,
		struct file *dst_file, loff_t destoff, size_t len, unsigned int flags)
{
	ssize_t status = 0;
	loff_t start = off, dest_start = destoff;
	size_t size = len, copy_len = 0;
	u64 ret_len = 0;
	struct ocfs2_device_extent_info dev_extent_info = {0, };
	struct ocfs2_device_extent_list *dev_extent_list = NULL;
	struct ocfs2_super *src_osb = OCFS2_SB((d_inode(src_file->f_path.dentry))->i_sb);
	unsigned int extent_list_size, max_extent_count,
				 rec_multiple = (OCFS2_MAX_CLUSTERSIZE / src_osb->s_clustersize);

	if (rec_multiple < MIN_MUL || rec_multiple > MAX_MUL)
		return -EINVAL;

	mlog(ML_DEBUG, "%s: start xcopy, start off(%llu), destoff(%llu), len(%zu).\n",
			src_osb->uuid_str, off, destoff, len);
	max_extent_count = MIN_XCOPY_REC_NUMS * rec_multiple;
	extent_list_size = sizeof(struct ocfs2_device_extent_list) +
				   sizeof(struct ocfs2_device_extent_rec) * max_extent_count;
	dev_extent_list = kzalloc(extent_list_size, GFP_NOFS);
	if (!dev_extent_list) {
		mlog_errno(-ENOMEM);
		return -ENOMEM;
	}

	while (size >= MIN_XCOPY_BYTES) {
		memset(&dev_extent_info, 0, sizeof(struct ocfs2_device_extent_info));
		memset(dev_extent_list, 0, extent_list_size);
		dev_extent_list->max_extent_count = max_extent_count;
		if (size >= MAX_XCOPY_BYTES)
			copy_len = MAX_XCOPY_BYTES;
		else
			copy_len = size / MIN_XCOPY_BYTES * MIN_XCOPY_BYTES;

		status = ocfs2_xcopy_read(
				src_file, start, copy_len, &dev_extent_info, dev_extent_list);
		if (status < 0)
			goto out;

		status = ocfs2_xcopy_write(
				dst_file, start, copy_len, &dev_extent_info, dev_extent_list);
		if (status < 0)
			goto out;

		start += copy_len;
		dest_start += copy_len;
		size -= copy_len;
		ret_len += copy_len;
	}

	ocfs2_try_to_generic_copy(src_file, off, dst_file, destoff, len, flags, &ret_len);
	status = ret_len;

out:
	kfree(dev_extent_list);
	return status;
}

static ssize_t ocfs2_copy_file_range(struct file *src_file, loff_t off,
		struct file *dst_file, loff_t destoff, size_t len, unsigned int flags)
{
	ssize_t status = 0;
	struct inode *src_inode = d_inode(src_file->f_path.dentry);
	struct inode *dst_inode = d_inode(dst_file->f_path.dentry);
	struct ocfs2_super *src_osb;

	if (!src_inode || !dst_inode) {
		status = -EINVAL;
		mlog(ML_ERROR, "Xcopy error: src_inode or dst_inode not exist.\n");
		goto out;
	}

	src_osb = OCFS2_SB(src_inode->i_sb);
	if (src_inode == dst_inode) {
		mlog(ML_ERROR,
			 "%s: OCFS2 src_file and dst_file cannot be the same file.\n",
			 src_osb->uuid_str);
		status = -EINVAL;
		goto out;
	}

	status = ocfs2_check_xcopy_support(src_file, off, len);
	if (status)
		goto out_gen;

	status = ocfs2_check_xcopy_support(dst_file, destoff, len);
	if (status)
		goto out_gen;

	status = ocfs2_xcopy_file_range(src_file, off, dst_file, destoff, len, flags);
	if (status < 0)
		goto out;

out_gen:
	if (status == -EOPNOTSUPP || status == -EXDEV) {
		mlog(ML_NOTICE, "%s: src_file or dst_file not support xcopy, "
				"try to use splice: start(%llu) len(%zu)\n",
				src_osb->uuid_str, off, len);
		status = generic_copy_file_range(src_file, off, dst_file, destoff, len, flags);
	}
out:
	return status;
}


const struct inode_operations ocfs2_file_iops = {
	.setattr	= ocfs2_setattr,
	.getattr	= ocfs2_getattr,
	.permission	= ocfs2_permission,
	.listxattr	= ocfs2_listxattr,
	.fiemap		= ocfs2_fiemap,
	.get_acl	= ocfs2_iop_get_acl,
	.set_acl	= ocfs2_iop_set_acl,
};

const struct inode_operations ocfs2_special_file_iops = {
	.setattr	= ocfs2_setattr,
	.getattr	= ocfs2_getattr,
	.permission	= ocfs2_permission,
	.get_acl	= ocfs2_iop_get_acl,
	.set_acl	= ocfs2_iop_set_acl,
};

/*
 * Other than ->lock, keep ocfs2_fops and ocfs2_dops in sync with
 * ocfs2_fops_no_plocks and ocfs2_dops_no_plocks!
 */
const struct file_operations ocfs2_fops = {
	.llseek		= ocfs2_file_llseek,
	.mmap		= ocfs2_mmap,
	.fsync		= ocfs2_sync_file,
	.release	= ocfs2_file_release,
	.open		= ocfs2_file_open,
	.read_iter	= ocfs2_file_read_iter,
	.write_iter	= ocfs2_file_write_iter,
	.unlocked_ioctl	= ocfs2_ioctl,
#ifdef CONFIG_COMPAT
	.compat_ioctl   = ocfs2_compat_ioctl,
#endif
	.lock		= ocfs2_lock,
	.flock		= ocfs2_flock,
	.splice_read	= generic_file_splice_read,
	.splice_write	= iter_file_splice_write,
	.fallocate	= ocfs2_fallocate,
	.remap_file_range = ocfs2_remap_file_range,
	.copy_file_range = ocfs2_copy_file_range,
};

const struct file_operations ocfs2_dops = {
	.llseek		= generic_file_llseek,
	.read		= generic_read_dir,
	.iterate	= ocfs2_readdir,
	.fsync		= ocfs2_sync_file,
	.release	= ocfs2_dir_release,
	.open		= ocfs2_dir_open,
	.unlocked_ioctl	= ocfs2_ioctl,
#ifdef CONFIG_COMPAT
	.compat_ioctl   = ocfs2_compat_ioctl,
#endif
	.lock		= ocfs2_lock,
	.flock		= ocfs2_flock,
};

/*
 * POSIX-lockless variants of our file_operations.
 *
 * These will be used if the underlying cluster stack does not support
 * posix file locking, if the user passes the "localflocks" mount
 * option, or if we have a local-only fs.
 *
 * ocfs2_flock is in here because all stacks handle UNIX file locks,
 * so we still want it in the case of no stack support for
 * plocks. Internally, it will do the right thing when asked to ignore
 * the cluster.
 */
const struct file_operations ocfs2_fops_no_plocks = {
	.llseek		= ocfs2_file_llseek,
	.mmap		= ocfs2_mmap,
	.fsync		= ocfs2_sync_file,
	.release	= ocfs2_file_release,
	.open		= ocfs2_file_open,
	.read_iter	= ocfs2_file_read_iter,
	.write_iter	= ocfs2_file_write_iter,
	.unlocked_ioctl	= ocfs2_ioctl,
#ifdef CONFIG_COMPAT
	.compat_ioctl   = ocfs2_compat_ioctl,
#endif
	.flock		= ocfs2_flock,
	.splice_read	= generic_file_splice_read,
	.splice_write	= iter_file_splice_write,
	.fallocate	= ocfs2_fallocate,
	.remap_file_range = ocfs2_remap_file_range,
	.copy_file_range = ocfs2_copy_file_range,
};

const struct file_operations ocfs2_dops_no_plocks = {
	.llseek		= generic_file_llseek,
	.read		= generic_read_dir,
	.iterate	= ocfs2_readdir,
	.fsync		= ocfs2_sync_file,
	.release	= ocfs2_dir_release,
	.open		= ocfs2_dir_open,
	.unlocked_ioctl	= ocfs2_ioctl,
#ifdef CONFIG_COMPAT
	.compat_ioctl   = ocfs2_compat_ioctl,
#endif
	.flock		= ocfs2_flock,
};
